From: 

Sent: 

To: 

Subject: 


□ (OTD) (FBI) 


Pririav .Inlw91 ?nn fi 3 27 PM 

\ □ QgmFBi) 

RE: Request fo| Information 


NON-RECORD 


fo2 

b7E 


Try our new tool on th e DCS-3000 webpage (DCSnet not Trilogy) under 


address and get all the! 

□ 


The new tool allows you to put in an 



Subject: Request fd | j tnfoi 

'inrmtrrni H unlLajoII illT 

NON-RECORD 


JOTD) (FBI)£ 


□ (PX)(FBI) 


fo2 

b7E 


Phoenix Police are investigating two serial killers who are acting independently (se e article below request). FBI is 

accictinn ...ifh rirnfilinr. -inA nthar cur'nnrfi./o moac.irao Caea imnl ran, laetorlb ■ 







If such data is available, an explanation of what might not be present in the data set is also requested (i.e. service 
providers not represented and/or other issues which would not be present or affect data provided). 



Case Nliim hftr fi?n-PX-7ftQ39 
Case Agen l 

The New York Times 
By Paul Giblin 
July 18, 2006 






be 

b7C 


PROFNTY A7._ Fnr 


v twn serial lrillprc who are. thnnoht tn hf» rPicnnnsiWf* fnr 



•T 


e 



sens it m e- 


I 

From: 

Sent: be 

To: hie 

Cc: 

Subject: 


](OTD) (FBI) 


J(OTD) (FBI) 

'□OS 11:44 AM 


,ThucadaY.iuk2Q.,^-- _ 

I V (CD) (FBI){ 

IE §12 


RC 


Z]FD) (FBI) 

b2 

b7E 


](otd)(fbi£ 


](OTD) 


RECORD 21 2A-WF-224477 i ^ 

b7C 

□ 



Since j h as a simple cost fee schedule, the costs were easily calculated using the following formula: 


It is impo ssible for me to accurately calculate th e l T :osts using the data from the DCS-3000 system since j | 

I I costs are a function of the number of switches provisioned with the target. Since the number of swtohesVStj 

with each intercept order I cannot accurately calculate the cost. 


□ 


fcs 

b7C 


b2 

b7E 
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fo6 

ib7C 


e 



< 


-Original Message — 


From: 1 

|(CD) (FBI) 

sriav lulu IQ 7ra]fi1(VSnAM ( 





Cc: 

kfdi rFfin — 



Subject: 





fo2 



RECORD 21 2A-WF-224477 




b2 

b6 

b7C 

b7F, 


b2 

b7E 


b2 

be 

b7C 

b7E 


Hello Gentlemen - 

I l has been dragging the ir feet in getting back with us regarding the number of lines/targets we have with them. 

So I met with l l to discuss the contracting issue. Here's what we came up with and would welcome 

your input. 


: d * ’ h as been slow in responding, let's start with l I you indicated that you have a good 

tionship with them, (and they're starting to charge us) can you get an indi catio n of coverage fro m them, r eoai 


Sinc« 

relationship with them, (and they're starting to charge us) can you get an indi catio n of coverage fro m them, r egarding 
all of ou r stuff to include-aaidtupg with the Bureau name on i t lto include joint j C overage etc) and I I Then 
| [ can you pull fror j j what numbers you have with | j so we can compare the two. 

What we're looking to do is get a snap shot of actual lines being used that we can verify. Then, what | l will do is 
add a rider in the contract that will allow for an increased amount/coverage. What she is concerned about in getting 
into a big excessive contract with the carriers and then not using the service (i.e, paying/contract for 500 lines and only 
using 300). fc6 

They other thing we were looking to do to jump start this is to go through the government sales/marketing people of !to7C 
the carriers and not the secu rity people. Since this will be an overt contract and other Law Enforcement Depts. & 
agencies, along with l I would be our customers and not the vendor's, we should be able to go through open 
govemn^jatjvUesuwithn' it issues (PLEASE correct me if I am wrong!!) So if either of you know a salesjjeiSMi/contact 
in either ! I or can find out through your other channels/contacts, please let me and | j cnow. 

We would still like to have something in place for October 1 st. 

So, to sum up... I need you gentlemen help with the following action items: 


(*l recognize it may not be an act ual represen tation of aji coverage due to the field offices not all using TMD etc, 
but we have t o start som ewhere. And| Ithis may be the springboard you need to get the Finance Division to 

help promote ! | 


If possible can you get this information to me by this Friday? (Please, pl ease, pleased I apologiz e for the short 
deadline, but I was hoping we might be able to talk about this at Friday's! lwill not be able to join 

us at the meeting, but I will be meeting with her later Friday afternoon. 1 1 

Thanks for your help and support! 1 1 will see you on Friday at 10:00am here in 1B045. | |you are 

both welcome to attend if you like as well. 

Thanks. l~ I 


OSlC/Special Projects 
FBIHQ/CD-8A, Room 1B045 
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b2 
lb 6 
lb7c 


Data Collection System 5(1 


ET 


— Original Message--- 

From:L 


□(OTD) (FBI) 


Monday. July 17. 2006 .12:12 PM 

— J(SecD) (FBU_ 

□ (OTD)(CON)r_ 


(OTD) (FBI) 

:: RE: Contingency plan Information 


UNlUfa&iPlgP - — 

NON-RECORD 


bb 

b7C 


© 


]0TD) (CON)£ 


(OTD) (FBI); [ 


Per our phonecon - I I s the ISSO for the systems in question. I'm sure he 

will be able to provide anything you need. Though I believe that he may be out of the office at 
least part of this week. 


ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTD) 

ERF, Quantico, VA 

Tel: (703j 
Cell:(2021 

Fax:(703J 


— Original Mess age — 

From: I I (SecD) (FBI) 

Sent; Monda y. July 17, 2006 11:26 AM 

To: l I (OTD) (FBI) 

Subject: Contingency plan information 


NON-RECORD 


I need contingency plan results for the following 


systems : 


Data Collection System 3000 
Data Collection System 5000 

Mantes b6 

U 1 b7C 


a j gj flfff i r iFD 
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u lj 

UN§4 ACJMg lFP 


I L (OTP) (FBI) 


From: I 1 (OTP) (FBI) b6 

Sent: Monday. July 17. 2006 11:25 AM fogc 

To: I | (ITOD)(CON) 

Subject: RE: Pen Register Data 


ccuf| T' 1,c BUT UMOLAOS tHCP 
NON-RECORD 

fcfe 


[=□ 


I checked all the CDNRS formatted files for this target on Houston£I>CS-3000 system and did not find any call records 
with "5*10" or other strange entries. We need to find out from ! fr vhere she got the data that she uploaded to TA. The 
data probably came from the | ^ stem's report , some field offices upload data from both systems, which is 

problematic since the time stamps are fllTTSrsnf and th a I system may not have a complete record (callin g num ber, cell 
site, etc) for upload. If this is the culprit in Houston, then please advise Houston not to upload data from the | S ystem if 
it is available on the DCS-3000. 1 1 


□ 


ib2 
to 7 |s 


□(rroDxcoN) 


L 2006 7:24 AM 
iHOI (FBI I 


SENSITIVE BUI 
NON-RECORD 


fob 

fo7C 


□ 


Could you please provide me with_an_ex£lanation of what the following pen register 
raw data means 5*10 (5*10) IGA, OXB6 . ^__^___^ > _|froTn the Houston field office uploaded 
several records into Telephone Application with the above similar raw data content from 
a pen register file. Thank you. 



— Original Message — 

From: I ~l HOHFBn 

Sent Thursday, lulu IT Pfinfi 5 :45 PM 
To: I I fnopycorh 

Subject: Pen Register Data 


!b 6 


b?C 




Would you please review the pen register data in T A for taroet l fc n particular...the raw 

data has strange info such as 5*10(5*10)IGA,OXB6. Do you have any idea what this would mean? 



Thanks. 

C 


b7E 


SENSII IVb m il I II II I I ilMIII 


■liAin AQCIFIFn 


fc6 

b7C 


□OTD) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


JFB1L- 


Z3 (OTD) (FBI) 
5 1 1 : 01 . 2 !' ‘ 


[LA) (FBI);L 




l(LA) (FBI); l 


□ (OTD) (FBI)C 

□ (LA) (FBI); | 


l (QTD) 
](LA) (FBI) 


4JHULM3&IFTED 

NON-RECORD 


We'll look into a fix for this on the DCS-3000. You should consult 


Jfor a fix for the Voice Box. In the 


interim, the only way to comply is set the stop date with cell sites and then after this date reset the stop date without cell 
sites authorized. 


□ 


be 

b7C 


— Original Message — 

From: I 


NON-RECORD 




rranf" 


□ (LA) (FBI); 


piphesqE 


] (LA) (FBI) 


□(OTD) (FBI) 


Hi guys. 

We seem to be losing the battle regarding use of 2703(d) language in, 


e i n a pen o re 

information. Out here in LA we are seeing many separate orders for[ tol 

dates diff ering from the pen register order. It Is difficult to keep track ana ensure we stop collection of the 
lot the appropriate time. Is there any way to build a separate stop date into the client software for 


order to c 
collection, with start and stop 


Information? 
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« I (OTD) (FBI) 

^ Thursday July Ofi PJTOfi 9:20 AM 

RE: DCS 3000 modem 


|VF) (FBI) 

200 6 4:46 PM 
_J|(0TD) (FBI) 


Sorry if I came in the middle of things. 


— Ori ginal Message — 

From: I l fOTD) (FBI) 

Sent; Wednesday. July 05. 2006 9: 58 AM 

To: . I I WF) fFB IH 

Ca 1 W fl (FBI) I 

Subject: RE: DCS 3000 modem 


,be r for the mod em at | ~~1 T he modem at this 

n to | | is down. we(Wi-O) need to contact I 


/ 


• 


From: 1 IfWR (FBI) 




To: iroTD) rpanl 




Cta fcWf) (FBI);| 

Subject: DCS 3000 modem 

(FBI); | 

twF) (FBI);| 

tWF) (FBI) 


U N CLA SS IF I ED 

NON-RECORD 


b2 

JbS 

b7C 

lb7E 



Some of this information is third hand so it might be a little distorted. 


.This is what I, was told- , — . 

I [contacte d I stating a line was running ooen. l [ stated it was for 

I b racked it to a modem that was not working properly. The modem is dialing out, can't connect, 

hanging up and redialing. This has been occurring for a week now. 


This is my research: 

I loo ked at this mode m. It is modem number # 6. It is connected to port# 5 on the Cisco 2600 series machine 
with I I 

According to our records Norfolk was calling this modem to connect to the DCS 3000 system. If this has 

changed then I am not aware of this. , . 

Based on the above I looked into the multiserver and could not find a switch for| [ on the 156.80.56.8 

machine. , , u 

I looked on the| jmultiserver and found th j I switch but it was not checked. 


I hooked a digit grabber to the modem and determined the number being dialed is 202 
know what this is?? I don't. 


<— Do you 


I searched this in- our database and came up with nothing which probably means that we did not order this line. 


Can you look into this and determine what this modem was being used for? Is it still needed? Can we power it 
off?? 


Q k you for your help. 

'fo6 

b’7C 


■UNCLASSIF1FD 
WUri ftSSOED. 
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NON-RECORD 


□ 

202 ^ | s the num ber for the m ortem at l l ~he modem at this locatio n is not answering, which is the 

reason the connection to | I s down. We (WFO) need to contact| |to seek assistance in restoring the 

connection. 1 1 5,2 



NON-RECORD 


Some of this information is third hand so it might be a little distorted. 

This is what I was told : ■ - < < 

| | contacte d 1 stating a line was running open ! I stated it was for Allegiance. ! S 

tracKea it to a modem that was not working properly. The modem is dialing out, can't connect, hanging up and 
redialing. This has been occurring for a week now. 

This is my research: 

I looked at this modem. It is modem number # 6. It is connected to port# 5 on the Cisco 2600 series machine with F# 


According to our records Norfolk was calling this modem to connect to the DCS 3000 system. If this has changed then 
I am not aware of this. ■ . 

Based on the above I looked into the multiserver and could not find a switch fo l b n the 156.80.56.8 

machine. ■ ■ < 

I looked on the| rnultiserver and found thl switch but it was not checked. 


I hooked a digit grabber to the modem and determined the number being dialed is 2021 |< — Do you know 
what this is?? I don't. I < 

I searched this in our database and came up with nothing which probably means that we did not order this line. 

Can you look into this and determine what this modem was being used for? Is it still needed? Can we power it off?? 





NON-RECORD 


8 I content is .... Content. We are working with EDMS folks to develop an interface betw een the nnS-3000 and EDMS. 
This will allow case agents to get the content via EDMS. I was unaware that TA could handl J fc ontent. We need 
more information to make this happen, assuming it's legai. 

□ 

— Original Message — 



NON-RECORD 


I just thought of something... would the l b e content or data? Would there be an issue in puttin d l out where 

anyone could see it? 

Perhaps after listening to two legal briefings I am paranoid, but would this not be unreviewed, unminimized, raw 
content? Almost like post cut through digits, but worse? Perhaps that is why it should not automatically go to TA? 

Did 1 just give you an out? Or am I being overly cautious? 



NON-RECORD 


We discussed this a long time ago and yes, it has reared it’s ugly head again, 










Seattle, 


l I 

— Original Message — 

From: I ISE) (CON) 

Sent: 5:20 PM 

To: I l (SE) (FBI) 

Subject: FW: TICTU Computer Based Training 

MNCLAJ»1>II ICL 
NON-RECORD 


b2 

b6 

b7C 

b7F, 


Have you seen this yet??? I figured that we both could try this but I did not want to answer for you, but if you want send 
back a yes for both of us 


□ 


. Seattle Tech Squad 

ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
: rational Technology Division (OTD) 
r I (Desk) 

(Cell) 

(Fax) 



b2 

bo 

b7C 


— -Original 

From: 

Sent: 

Cc: 

Subject: 


l(OTD) (FBI) 


1 linirsdau. June IT. WfWJ 17:38 PM 


TTCTU Computer Based Training 

1 » UJ 


" "UNLLAiJHBEO — 
NON-RECORD 


be 

b7C 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. All we ask is you review the materia! and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 

If you are unavailable to review this course, please let us know. Questions concerning this course review can be 
directed to l la t (703) 1 1 


Thank you for your help ensuring that we produce a quality training product. 


From: 

Sent: 

To: 

Subject: 


I IOTD) (FBI) 

Friday. June 25. 2DDB i:05 PM 
» - l(OTD) (CON) 

FW: TICTU Computer Based Training 


UM0LA03HTED 

NON-RECORD 


Ifs like they're jumping out of the water, right into our boat 

— Original Mess age — 

From: I „ fC0N) 



Frirlav limp 5nnfi Ip!?? PM 

To: 


Cc: 

1 WficONjf 1 

Subject: 

RE: TICTU Computer Based Training 


< Mil l )\n III nTT 
NON-RECORD 


fe 6 

](LV) (CON) b7C 


□ 

I would be happy to participate. It's the least I can do to show my gratitude for the outstanding support you and your 
section provide daily. 

Please mail to my T A: 


Las Vegas, NV 89104 
Thanks, 


m n 

Original Message^^^^^^^ 

From: I l(OTDHFBI) 

Sent: Thursday. June Him 1:38 PM . 

Cc: I I (OTD) (CON) | | (0TD) (FBI) 

Subject: TICTU Computer Based Training 

^CLASSIFIED 

NON-RECORD 
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TICTU Customer, 


J 


e 


The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 

course, Please let u s know. Questions concerning this course review can be 
at (703) | | 

Thank you for your help ensuring that we produce a quality training product. 

jXhaalt;, 


jj° b If you are u 

b7c directed to! 


B MOLAGCiri E D 

UHGLA03IHED — 


1 = 

From: 

Sent: 

To: 

Cc: 

Subject: 


tOTP) (FBI) 



RECORD 321 C-N Y -229487 sub KKK 


b2 

b7E 


](NY) (FBI); 


□ 

1 just realized you had two issues. 

The "buzzing" noise you get on th e| p layback is b j "R esign. Since the I S ystem was designed as an audio!^ 

collection system, it needs audio fifes to be collected witn intercepted sessio ns if there 's no intercepted audio for a 
session the | | creates one full cQaaisel the referenced example, again ! I there were two CDC call records 

generated forone call (I spoke t cj | about this yester day! . This is not unusual in the CALEA domain for incoming 

call s, but in this case it was an ou!§6incj call. I'm not sure why I B vstem generated two rail records for this call. 

Tha [result was one session with call data and good audio and one session with call data and| [generated noise 


□ 


bb 

b7C 


— Original 

From: 

Sent: 


Thursday, June 


J(NY) (FBI) 

22, 2006 8:51 AM 


b6 

b7C 
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SECRET 



! 



fo7E 

S E tKbHf N eron u - 

RECORD 321C-NY-229487 sub KKK 


Guys, . 1 

I hav&attafhed a cryinla nf.telephonvaflflt outs from ! l it seems on the cell phones when the pen date is 

pushed int d l and it is i p iessage l D oesn't always interprets it correctly, it anne ars as HEX data. The 
other problem is it is a 0 second session and it doesn't always sho w up as a D (data) in | E ither. Take a look at the 
attachment. The first three are from the same pJjaofi, I believe it is | fe nd the message did not come through. 

The DCS-3000 caught it correctly. The last one | [ did catch the message, but it also put HEX data in as well. This 
is definitely a problem. 1 1 

« File | | | »df » 


Another problem I just noticed is that on some of the cell phones we are getting duplicate sessions 
mean is it will appear as below; 


□ v 


The difference is on the one with the Contact ID, if you hit playback the session only lasts about 10 seconds and is 
just buzzing noise. The second call actually has the 4:55 audio. This is causing a lot of confusion. I have seen it on 
several cell phones. Any ideas. I getting overwhelmed with this stuff. Thanks. 


'NYOSquadS 
work: 2121- 

cell: 917[_ 


be 

b7C 



1/97 f Foreiqn_Cau«te iluU.lliuuilC6 Investigations 



From: be 

Sent: b?c 

To: 

Subject: 


JOTD) (FBI} 


FW: TICTU Computer Based Training 


.QZAM 
_J (OTD) (CON) 
ised Traininj 


NON-RECORD 


he 


hi C 


— Original Mess age — 

From: I IC SJ^ (FBI) 

Sent: Friday. June 23. 2006 9:5 1 AM 

To: I i rOTDWFBII 

Subject: RE: TICTU Computer Based Training 

U HOLAOai PIEP- 

NON-RECORD 


Ok, send the CD down. Thanks] 

T>5n juan Divis ion 
787 1 I 

787.| [Cell) 


□ 


be 

b7C 


— Original Message — 


From: 

Sent: 

Cc: 

Subject: 


|OTD) (FBI) 

Thursday. June 22. 2006 4:38 PM 

I (OTD) (CON)| 

lifciu computer Based I raining 


JOTD) (FBI) 


PN CLA93 IH E D 

NON-RECORD 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end. we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 

If you are unavailable to review this c ourse, please let us know. Questions concerning this course review can be 
directed to ! l at (703) I I 

Thank you for your help ensuring that we produce a quality training product 
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■SECRET 


From: 

Sent: 

To: 

Cc: 

Subject: 


□<OTD) (FBI) 


Friday, June 23. 200 6 10:07 AM 
' . J (NY) ( FBI);|_ 




TgTDWFBn 


]NY) (FBI); 


■SFCBFTffNOFORN 

RECORD 321 C-NV-229487 sub KKK 


□ 


b 6 
b7C 


This is a known issue with the| ]and an expected oi 

not, up to this point, had a lot of experience with the m ultipl 
example you p rovided appears to be f roro_al h araet.l 

when comes I d I messaaino. Th el F i ' 


:pected because ! l and thelfeystem have 

iding schema used by wireless providers. The 
is prob ably the mos t difficult carrier to deal with 
am i C ALEA delivery system vary as 


es to l I messaaino. The ! h essaae formats we receive fror 

function of switch type a nd som etimes we even see variations within the same switch type. To date, we have been able 
to modify th e DCS-30Q0 'sl bcnrip engine in-house as we see these variations occur in our intercepts— We are 
working witl| |to provide assistance and examples of these variations so they can improve thel I 


□ 



j](NY) (FBI);Q 


SmiLIJJIIOI UU jJ ^ 

RECORD 321 C-N Y-229487 sub KKK 


Guys, , , 

I have attach ed a co uple of telephon y print o uts from l I t seems on the cell phones when the pen data is 

pushed into j | nd it is d i nessaoe. l l oesn't always interprets it correctly. It appea rs as HEX data. The 
other problem is il is a 0 second session and it doesn't always sho w up as a D (data) ir | E ither. Take a look at the 
attachment. The first three are from the same P hone | believe it i d I and the message did not come through. 

The DCS-3000 caught it correctly. The last one, | j did catch the message, but it also put HEX da ta in as well. This 
is definitely a problem. “ 1 


e l I f dl 


Another problem I just noticed is that on some of the cell phones we are getting duplicate sessions 
mean is it will appear as below: 


m v 


b7C 

b7F. 


iF^feT 
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The difference is on the one with the Contact ID, if you hit playback the session only lasts about 10 seconds and is 
just buzzing noise. The second call actually has the 4:55 audio. This is causing a lot of confusion. I have seen it on 
several cell phones. Any ideas. 1 getting overwhelmed with this stuff. Thanks. 





Looking at getting the GR-30 solution for the pen’s from l fe nd then a ring down circuit for the audio. What do we 

need for our DCS 3000? 


FfJHFT 




Wow! They’re really biting today. 
— -Original Mess age — 


IM P) (FBI) b6 

!. m ,5:46 


JOTD) (FBI) 

Subject: RE: ticfu Computer Based Training 


:46 PM fe 7C 


NON-RECORD 
Hey| | 

I'll give the training course a try. Please send me the CD and I'll try and get it done according to your time-frame. 

I "~l 


— Original 


Original Messat 


Cc_ C 


Subject: TICTU Computer Based Training 


”l(OTD) (FBI) 

70053: 38 PM ■ . bfa 

] (OTD) (CON); | [ OTP) (FBI) b7C 


UMCMVCOIHEP 

NON-RECORD 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 






,JET w 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 


If you are imauaiiahig tr> rovigw this course please ipt us know Questions concerning this course review can be 
directed t j | rt (703) | | 

Thank you for your help ensuring that we produce a quality training product. 


Thanks 


foe 

b7C 


UMbLAUJIl'ILU — 

1 I /OTP) /FBI) 

From: I 1 (OTD) (FBI) 

Sent: Friday, June 23, 2006 9:41 AM 

To: I i f OTD) (CON) 

Subject: FW: TICTU Computer Based Training 


foe 

fo?c 


uxr.i flfifffFIFP 

NON-RECORD 


Caught one so far 

foe 

-----Original Message.--- fo7c 

From: 1 fa-h (CON) 

Sent: Frirfa « lnnnrl Tnnc a -4 ft AM 

To: I I fOTDUFBn 

Subject: RE: TTCTU Computer Based Training 


NON-RECORD 


nnunria great! PleasR sfinri a r.m 


L 


fo2 
lb 6 


ELSUR Technology Management Unit (! 

Electronic Surveillance Technology Section (ESTS) b7C 
Op erational t echnology Division (OTD) 


404 

404 

770 

404 


pDesk) 

KCell) 

tHome) 

jFax) 


— Original Message — 

From: I I (OTD) (FBI) 


RFhlTT 
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j 


© 


Sent: 

Cc: 

Subject: 


Thursday, June 22, 2006 4:3 B PH 
I l(OTD1 fCONa 

1 Tltru Computer based Training L 


inn -rnrir— 

NON-RECORD 


]0TD)(FBD 


fob 

b7C 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 

If you are unavailable to review this c ourse, please let u s know. Questions concerning this course review can be 
directed t< f j at (703) 1 1 

Thank you for your help ensuring that we produce a quality training product 



be 

i II n i mmnar b7c 

IfOTm (FBI) 

From: I "fc >TD) (FBI) 

Sent: Thursday Juna^ 45 b PM 

Cc: | I OTP) (CON) l |[OTD) (FBI) 

Subject: i kj i u computer Based I raining 


NON-RECORD 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled Switch- 
Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA based 
intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire CMP 
. community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the training 
course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like to release 
this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 21 , 2006. 

If you are unavailable to revi ew this course nlea se let us know. Questions concerning this course review can be directed 
to f fe t (703) | T 
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fo6 

b7C 


t we produce a 


Thank you for your help ensuring that we produce a quality training product. 


4JWCLAAJ>II ICI T 


l(OTD) (FBI) 

Ifi 22, 2006 3:35 PM 

lOTD I (FBI) , 

“lOTD) (FBI); 


■ftconETz/wum rost 

RECORD 315 


Here are the CALEA numbers for 2006. There are multiple ways to present the information. The two I chose are: 1) new 
lines added in CY 2006, and 2) lines intercepted in CY 2006. 



Note these numbers are for CALEA-enabled intercepts supported by the DCS-3000 system. The T-50 numbers will 
comletely overlap with the DCS-5000 numbers, and a portion of the criminal numbers will overlap with the DCS-6000 
numbers. 


DECL^SytofffeiiL^XEMPTION 1 
S E CggT ffN Q F Q RN~ 
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From: 

Sent: 

To: 

Subject: 


I I (OTD) (FBI) 

/Thursday. June » W5 :34 AM 

C__ZZZJ(NV) (FBI) 

RE: VOIP PEN DATA FROM DCS 3000 


• sceagT/ZNOFORN hie 
RECORD 31S 


We don’t have anything here for this number. You s hould contact! e nd ask them to check that they are 

sending the pen data to us over our VPN connection.) ~[ the best point of contact 



foe 


Original 


To: 

Subject: 


Wednesday. June 21. 200 6 7:28 PM 

W v6^PENDArA -^M°Ss S 


fo?c 


fo2 


fo7E 


SeCWETZ/NOFORN 
RECORD 315 


— Origjnj 

om: r 


l (OTD) (FBI) 
te 21, 2006 5:48 PM 
[NY) (FBI) 

)ATA FROM DCS 3000 


SeeRgW/NOFORN 
RECORD 315 


foe 

fo7C 


nn 

Do you know the carrier for this number? 

□ 


— Original Mes sage — 

From: I (FBI) 

Sent: Wednesday, June 21, 2006 4: 13 PM 

To: I" I OTP) (FBI) 

Subject VOIP PEN DATA FROM DCS 3000 

sccREt/znoforn h6 

RECORD 315 b7c 


He O 


Sorry to bother you but ! I suggested I contact you. There's a terrorism target that went from criminal 

to the dark side. The pen register for this VOIP was discontinued yesterday and inputed by me on ouj ' 
ir. r\p s 3ooo. However, no data is pumping thru. Can you look into this? The target number i/ 


iuiii wiimincai 

o ur side 


Thanks. 


132 


fo2 

fo7E 




:t 








9 


n 


RE: Pen data NY 


30TD) (FBI) fo6 

^006 6:15 PM 
J(NY) (FBI) 


SECKblBNOFORN 
RECORD 31 SN-N Y-294S58 bo 


□ 


Nothing delivei 
anything on " 
number in the 


on the first two hard lines since 6/13; nothing at all on the third hard line. I cannot find 
|target. Can you tell me the "C" number for this target? I may be able to search on this 


□ 


fee 

b7C 


J(NY) (FBI) 

I to™ (FBI) 


Subject: Pen data NY 

SE6RET//N0F0RN 
RECORD 31SN-NY-294558 


PL 


iard lines and oneP 


what the case ID is suppose to be and we will put it in tomorrow. 


JVolP. The VoIP is not in the FISA DCS-3000. Let me know 


b2 

b7E 


The CMP did not get any data foil I while the FISA DCS-3000 is working fine. I am not sure what happen there. 
Thanks. 1 1 



SEI 


ikr 


From: 

Sent: 

To: 

Subject: 


I I (OTD) (FBI) 

Tuesday. June 20. 2006 5:50 PM b6 

I RE | | USE) (FBI) b7c 


UNCLASSIFIED 

NON-RECORD 


CZI 

The software installation will go out tomorrow via bu mail. Let me know when you get it, and I'll help you set it up. 

□ 

Original M 


be 

b7C 


Sent Monday. June 19, 2006 7 :09 


T 


IE) (FBI) 

":09 PM 
[OTD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Seattle just re ceived our copy o | I Whenever you get an opportunity (do not stop everything!) give me 

or | ~| a 02,11 and we will work with you go get our DCS 3000 "adjusted" 

THANKS! b6 

b7C 

UMCfcAgsff ICD 

I Mill i tw intTi 




Is there a way foi l l o decode th q | hat actually have content? Currently, the message appears to be in a 
hexidecimal format under the Telephfirty log. 


Thanks, 




JNY) (FBI) 
16,2006 4:" 
rD) (FBI) 


Friday. Jun e 16, 2006 4:05 PM 


INY) (FBI) , 

3000 quesCorj^_^_| 


fo2 

fc7E 


NON-RECORD 


□ 

We currently have FISA coverage on I L itl j~~t overage. The attached ! | og shows quite a 

few messages, but there is no associated text on most or them with the exceptions of alew. 

Additionally, the mess^jesjia not show up il l I For the few messages that actually appear in the | fc g, 
the message appears i l L nder the Telephony log as hexidecimal numbers. 


^ 1 


« File l f .Aii J f pt.txt » 

u niCLASsir i CD 


yftCLASSirJED 




o 


From: 

Sent: 

To: 

Subject: 


~|3TD) (FBI) 


(OTD) (FBI) 
PM 

" Accepted: DCS3000-ED Js Interface 


be 

fe7C 


From: 

Sent: 

To: 

Subject: 


bTDJ (FBI) 

I I f OTP) (FBI) 

Friday. June 16 2006 5:55 PM 

I |NY) (FBD 

1 RE: BC5 3005 question ! 1 


be 

nwn ftnniriFrr b 7c 

NON-RECORD 


□ 


□ 


b2 

fo7E 


be 

fo7C 


Subject DCS 3000 questi) 


||JYWP^ ) 


[05 PM 
(OTD) (FBI) 


— 1 

NON-RECORD b6 b2 

b7C b7E 

□ 

We currently have FISA coverage o j jv ithC I veraae. The attached ! j og shows quite a few 

messages, but there is no associated text on most or them with the exceptions of a few. 1 

Additionally, the me ssages do not show up in I frnr the few messages that actually appear in the | | g, the 
message appears ir | I nder the Telephony log as hexidecimal numbers. 

Thanks, 

r ! be ■ 

hr dj 1 " I b7c 


« File[ 


]AI 1| t 3t.txt » 
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I KNY) (Fi 

RE: DCS 3000 questioi 


|(OTD) (FBI) b6 
ZWPM b7< 

fa 



displaying the raw binary encoded data. 


. So, in these case the 


— Original Message — 

From: I INY) (FBI) 

Sent Friday, June i6, 2006 4:0 5 PM 

S I rf 1 " “ 

Subject: ocs Juuu questioi|____| 

uiTCLAsan il-u — 

NON-RECORD 


□ , _ 

We currently have FISA coverage or l L ithF I coveraae. The attached | j og shows quite a few 

messages, but there is no associated text on most of them with the exceptions of a few. 

Additionally, the mescaaae do not show up ir j | For the few messages that actually appear in the log, the 
message appears irj lender the Telephony log as hexidecimal numbers. I—— I 


log shows quite a few 



From: I l (OTDHFBI) 

Sent: Friday. June 09. 2006 11:38 AM 

To: I IjOTD) (FBI) 

Subject: RE: ISSO COOP Questions h6 

hi c 


UNCLASSIFIED 
NON-RECORD b6 

hie 

□ 

Here are my responses to the three questions: 

1. DCS-3000 

2. Yes 

3. The system does not use back-up tapes. Mission data are periodically (i.e., daily) saved and archived by each field 
office system administrator to removeable media and handled in accordance with each field office's evidence control 
procedures. 

□ 


I |(OTD) (FBI) 

1 IfOTDUFBnl ICOTD) (CON)i _ 

"lmn (fbt)-j j 

form (Con a otd) (conii 

» Eg™ . .fe 

(OTD) (FBI);! 1(010) M-BiLI 

1 lOTD) (FBI):I 

r rsTsm ,Yn I/awm/mi 

J (OTD) (FBI)I 
IOTD) (TBI)I ^ 


i (ohmm j jqid) fFBiii 

1 1 (OTD) (OGA);| 

ISSO COOP Questions " ' 

IOTD) (FBI)L 

'OTD) (FBI) 

J[OTD) (FBI) 

^uiujVbxj; 


aW OLACCir i L D 

NON-RECORD 


You have been identified as an Information Systems Security Officer (ISSO) for specific IT Systems (see attached 
listing). During preparation of the OTD Continuity of Operations (COOP) Plan, mission-critical systems must be 
identified as well as back-up storage locations. Please provide answers to the following questions by COB June 9: 

1 - Identification/Name of IT System 

2 - Is it mission-critical? 

3 - Where are the back-up tapes stored?* 

*lf your system has been identified as mission-critical and arrangements for back-up storage have not been made, 
please advise and the Security Management Office will arrange for delivery and storage of the tapes. 

« File: Quantico ISSO Listing.xls » 

Thank you! 


fo2 

be 

b7C 

b7E 
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I've been out of the office for the past two weeks. I will comply as soon as possible. 


Subject: DCS3000 

nwimsaiHEo 

NON-RECORD 


I fSecDI (FBI) 
■ June 01. 2006 4:05 PM 

I rOTP) (FBI) 


You are the last one, what the status of your completed exercise document. 



fcb 

b7C 


9 


From: 

Sent: 

To: 

Cc: 

Subject: 


^iVet 

1 (OTDMFBI) 




□pTD) (FBI) 
liS7 AM 

(KC) (FBI). 


RE: DCS 3000 


J(OTD) (FBI)I 


}OTD) (FBI) 


JCITOITIVE BUTUHQLAGG i r 
NON-RECORD 


Yes. We need to get you a separate machine for FISA. 


[ 


□ 


] will be able to help. 


be 

b7C 


— Original Messac|e^^___ ii ^_ 

From: I I fKQ (FBI) 

Sent: Friday lnnp 07 11 :0? AM 

To: I I f OTD! (FBI)! 

cc I 1 rKa(FBn:r 

Subject DCS 3000 

OC N P I TWC PUT UNOLASC i r i CD 
NON-RECORD 

be 

b7C 



JkC) (FBI) 


As you ar e probably aware. theT 

, retirements I 


~l systems around the Bu are being isolated in SCIFs per Security Div. 


□ 


r l l can't figure that one 

out but they don't pay me to think about these things. Our SCIF has not been officially closed off yet but will be soon, 
and the criminal Agents, analysts, etc may not have access to it depending on their clearance level. They do need 
access to the 3000 from time to time. 


Question: are we planning to have two DCS 3000 in each office to separate the FISA from the criminal? I am sure 
that will be an issue soon. 


Thanks, 

[=□ 


fo6 

b7C 


omsmy e . BUT unou » .GG i r i| e 
SFNSITIVF RUT.IINPI flSSIFIFn 
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be 

fc7C 


I (OTD) (FBI) 

J6 10:47 AM 
JPX) (FBI) 


Where are you getting th d I nforma tion (TA. DCS-300 0. or some other source)? If the data is coming from DCS- 
3000 or TA, the switch id is available as thd h thi s case, you can use the TICTU Trilogy website to actually 

show th j T'"— ' | If the data is coming from some other source then ynn 

will hav e to asK me provider to the data to include the switch id. If you need to discuss it further give me a call at 703 | | 


J(PX) (FBI) 

:34 PM 
I (OTD) (FBI) 


4JWOfeA99iriCD 

NON-RECORD 


I work on a drug squad in Tucson and we currently have two pen register^ I for a c ase we 

are working as a squad. We have heard that you are the FBI's expert regarding the use ot | I so I amib 7 E 

hopeful that you can answer my question. 



If you would rather talk, I can give you a call in the morning. We are three hours behind you, so I can call 
around 1 1 :30 your time, if tha t works. Please note that none of us here are technically trained agents, and 
are novice users of | l and pen registers in general. We do have some technical background from life 
before the bureau, however. 


Thanks for your help, 



T 







Try setting the following features from "False" to 'True" as listed below. Pick a handful of very busy targets to test 

1) Choose Tar get Line : 

1 a) Supres f 1 = T rue 
1b) SupressLocauon = True 


Let us know if this makes a difference. 


Thnx, 

□ 


foe 

fo7C 


fo2 

fo7E 
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:t 


!ET 


b7c happening on all the cell phones, not just specific companies. Any ic 


NYO Squad £ 
work: 21i 

•cell: 911 




urJCi-AbblUED ~~ 
NON-RECORD 



(OTD) (FBI) 
2:10 PM 

L£EB0 

software 


it makes the software work. In other words, we need the data tha| 


— Original Message 

From: I 

Sent Wedne 


J <OM) (FBI) 

7. 200 6 1:02 PM 
_J(OTD) ((TO 
foMl (FBI)r 


U NCLAOO IPI EP 

NON-RECORD 


I'm looking for your assistance in obtaining 


3 irrently have a pen register ot|_ 
formation . The phone is thoug 
jWhen I looked at the] 


|Law Enforcement line al 


x | | cell 


sites in the Omaha Division. 


telephone number! jvith authorization to obtai nl~~ 

i the ytate of Nebraska. According to the DCS3000, the target is using 
it indicated that no | * *~~~~| 

bption 1 and was told b| ho n 9 f have any 


software available. He consulted with his supervisor ana thought I would need to contact 


149 




j3'so said ^^tete^base did not have any information regarding^ 


Do you have a point of contact atQ 
State of Nebraska? 


3hat 1 can call to see about gettii 




Thanks, 



b2 


b7E 




UNQLAoa i P ieD 


From: 

Sent: 

To: 

Subject: 


□ (OTP) (FBI) 


H(OTD) (I 


775000 10:53 AM 


Wednesday 

' re. COUP Resear ch 


b6 

b7C 


‘inr ‘ 

NON-RECORD 


b2 

’ b7E 


□ 

The DCS-3000 COOP specifies the|_ 
located at ERF. 


] as the backup site for the key DCS-3000 system components 


□ 


be 

b7C 


From: I b it)) (FBI) 

Sent: Wednesday. Mav 17. 2006 8:38 AM 

To: J , If OTD) (FBI) 

Cc: I l(OTD) (FBI) 

Subject: Research ' 


UNCLASSirilfD 

NON-RECORD 

b6 

'' H i l l am researching some issues regarding Continuity of Operations (COOP), and certain aspects that must be 
addressed in our Division's COOP Plan. I met with AD Haynes on 05/04/2006, and he asked me to look into several 
matters. One issue is back-up capabilities for systems. Do you have any systems that are currently backed-up in an 
alternate location? If so, which system and where is it backed-up? If a back-up system is not available, one will need 
to be initiated. Can you assist with these questions? 


b2 

b6 

b7C 

b7E 


150 



■'tm f eeictc ™ 


9 



^§§|F|EP 


[ 


From: 

Sent: 

To: 

Subject: 


be 

b7C 


l(OTD) (FBI) 

I I (OTD) (FBI) 

Thursday. Mav 11. 2006 5:09 PM 
I , . I fOTD) (FBI) 

RE: Reques ) d istance for St Louis 


— UNCLASS I F IED 

NON-RECORD 


Thafs j "T rhe Magnificent ... 


— Origin al Message — 

From: I I form (FBI) 



— n 

NON-RECORD 


b6 

b7C 


I O TP) (FBI) 

JCGHFBI) I ' ' I (OTD) (FBI) 


b2 

b7E 


b2 

b6 

b7C 


^ Thanks 


hanks for the heads up. I spoke with I 
specific phone, through the use of the D 
the target. Keep us posted. 


Ja little while ago. Om 
3-3000, the magnificenl 


nined that the subject is using that 
/ill work his magic and and help you 


be 

b7C 


Advanced Telephony Unit 
Operational Technology D ivision 
Office (703[ 1 

Mobile (703 
Fax (703 



Subject: RE: Requr 


UNULASJi.il ILL! ""* 
NON-RECORD 


ICG) (FBI)r 


b2 

b7E 


nn _ 

I have spoken with|_ 


The details are as follows: 
Case Agen( 


] concerning SL’s "possible" need ford 


T573) | | (Q) (573) | | 

u RA, approx. 120 miles South of 


(C) 


he 

b7C 



b6 

b7C 


A drug related homociae investigation. One subject is in custody. Agents are 
attempting to locate the subject who is somewhere is South ern Illinois . 
Eastern Missouri, or Northwestern Kentucky. The carrier is l I Case 

Agent is obtaining the 2703D order as I type this, the AUSAs office advise the 
order should be ready by 05/13/06, but I will call you once I have it in my 
hands. As soon as I have the 2703D and entered into our DCS-3000 I'll contact 
C3 s he instruct ed. Tha t's all I know at this point. 

^Thx for your help - [ | 

FBi-Sjjjmis. , 

m) \ | 


— Original Message — 



NON-RECORD 


We are on it. 



Advanced Telephony Unit 
Operational Technology Division 

Office (7031 

Mobile (703 
Fax (703 


fc2 

b6 

fo7C 


fo2 

b7E 


be 

b7C 


— Original Mess age — 

From: L JOTD) (FBI) 



-rtf in i-iinrn 

NON-RECORD 



Jo get your regional team on the hook. 


techni cal" 
O: 54 ol 
C: 2021 


IHneT 


Development 


Unit 


be 

b7C 


Original Messapp 

From: I I (SL) (FBI) 

Sent: Thursday. Mav 11. 2006 3:41 PM 

To: | | (0TD} (rai) 


152 



bs 

L7C 


b7C 




(CTO) (F8I) ; r 


IJOTD) (FBI) 


be 

b7C 


•pTICLAOGIWfcO . 

NON-RECORD 


□ 

^ The Ca^ f 


|pe Girardeu RA has the potential for needing the assistance of 

n a murder investigation. What do I need to do to get our 

regional team on standby? What does the case Agent nee d to do in the 
way of providing information, case Hx, ect? The carrier i d I 

and the geographic area is Western KY, South Illinois, Eastern 
Miss ouri (a ll very rurall. Please advise. 

-o 

I I 

(3M) I | 


UNgrtggff I CP 
UTICLASUII IkU 


UNCLASSIFIED— 


uUllLAltblPILU- 


~UNCP^5»F4SD 


I 

From: 

Sent: 

To: 

Subject: 


lprn| f FBI) 

i I (OTD) (FBI) 

Thursday Mav 1 1 . 2Q 06 4:17 PM 
I , , Zj(CTD) (FBI) 

RE: I b n subject's cell phone 


h6 

bic 


e 


•SECnE'D/ORCON.NOFORN 
RECORD 31SN-SU-S8S18 


Sorry about that. I checked, and there have been just over 800 Packet Envelope messages collected for thi d 1 
target line. However, none of the messages had any meaningful content. To verify there was not a problem o n the 
collection equipment I spot checked the data from 5/1-3/06. I examined the raw data and found no meaningfulf" 

message content in more than 10 Packet Envelope messages. This could be a result of either the target is non] 

to communicate (in this case the intercepted Packet Env elope mess ages would be for control messaging to the phone 
such as activating the voicemail indicato r on the phone) o l b not sending the content. The latter case may be due 

a ample prov isioning mistake by | I or their intercept system may not be properly working. The only way to know is to 


□ 


— Original Message — 

From: I t CTDI (FBI) 

Sent Thursday. Mav 11. 2006 1:58 PM 

To: I I (OTD) (FBI) 

Subject RE: | b n sublecfs cell phone 


8gCRgF//ORCON.NOFORN 
RECORD 31SN-SU-58518 


□ 


number was in original email - seen below. Hope that helps. 


-Thanks, 

1 1 1/Conus 4 / 5ST5T 


fc >6 

fo7C 


be 

b7C 


—Original Message-— 

From: I I rotm (FBI) 

Sent: Thursday. Mav 1 1 . 2 006 9:18 AM 

To: I tCTDi (FBI) 

Subject R 3 b n subject’s cell phone 

sg&Rfi37/ORCON.NOFORN 
RECORD 315N-SU-58518 

□ 

I can check the DCS-3000 collection system to see if we 
need the number. 


lb 2 
b7E 


have collected any | [ messages for the target I just 


□ 


— Original Mess age — 

From: I Ittdi (FBI) 

Se nt: Wednesda y. May 10, 2006 7:54 PM 

To: | l (OTD) (FBI) 




■L 


154 



CH- 


ET 

subjects cell phone 


- OCOR E T //ORCON.NOFORN 
RECORD 31SN-SU-58518 


] I am told you would be able to verity if our subject is using his l Ip hone 


In speaking with! . _ 

for text messaging - or ror tnat matter, receiving text messages. If I give you his cell phone, can you assist? 
We currently have switch packet on his cell, but we only pick up the voice conversations. 


Thank you for any help you can provide. 
Please call or email if you have any questions. 


b2 

b7E 


'HO mytjonus4M mKb 

,$7lL, , I 


be 

b7C 





lOTD) (FBI) 


From: be 1 

l(OTD) (FBI) 



To: ' Q 

|WF) (FBI)f 

|WF) (FBI)| 

IWF) 


Subject: I 1 


UNCLADOtPff P 

NON-RECORD 


Guys, 

I recently checked your new DCS-3000 system used for the£ 


Collection. It looks like you're missing some 


messages on occasion. We've seen this problem with other intercepts in the past. It's due to the switch initiating the 
delivery of the data before the delivery line settles after ringing. That is, the switch calls our delivery number, the phone 
line rings, we sense the ringing and answer, the switch immediately begins sending the data. The problem with this is the 
ringing voltage and the seizure of the line by our equipment cause fcacsieoLooise for about 300 ms. This noise corrupts 
the FSK data and you miss pen-register data. The fix is simple: te l r ot disconnect the delivery connection after a 

intercepted call is co mpleted. This will keep the delivery line up as if it Is a leased line, and we will not encounter this 
problem. Il| | pushes back call us, and we will try explain how to do it on their side. j c2 


n 


UfJLLMJJIHfcO- 

I 

From: 

Sent: be 

To: b7c 

Subject: 


]oTD) (FBI) 


^Thursday. 


I OTP) (FBI) 
Mav 11. 20 06 9^18 AM 
ZJ(CTD)(FBI) 

(in subject's cell phone 


gTCR E TJlOnCO I Ijjl OF OR N 
RECORD 31SN-SU-58518 


I can check the DCS-3000 collection system to see if we have collected any | I messages for the target. I just need the 
number. , 


□ 


—Original Message — 


](CTD) (FBI) 

6 7:54 PM 

:OTD) (FBI) 


In subject's rail phone 


RECORD 31SN-SU-58518 


b2 

fo7E 


be 

b7C 


In speaking with^ 


] I am told you would be able to verify if our subject is using his | | phone for text 






messaging - or for that matter, receiving text messages. If I give you his cell phone, can you assist? We currently 
have switch packet on his cell, but we only pick up the voice conversations. 


Thank you for any help you can provide. 
Please call or email if you have any questions. 


TTCS 


sJZ45i55 ‘" 


fo6 

!b7C 



JVIondav. Mav Q8. 2QQS fc40 pm 

1 „ l^HNUFRn 


I've been waiting for you to call or email me - since I heard I l eft I figured you would be taking over the day to day 
responsMiiesJifJhe DCS-3000. Welcome to the club and please feel free to call me anytime you need help. For the 
pendin gr b en, just enter the target number (no spaces or dashes - e.g l I n the DC S-3000 Client a nd 

click save to start monitoring. It should work from that point. If not Call me. My new number is 703 1 I 


fo2 

b7E 


□ 


3(HN) (FBI) 


Original Message-- 

From: I 

Sent: Monday. Mav OS. 2006 5 :23 PM 

To: I i (OTD) (FBI) 

fo6 cc — 

b7C • Subject: 

UNO A RR|F lcn 
NON-RECORD 


Aloha | | 

Hope all is well with you. We are going up on a pen register for aQ 
there's anything else you need. 


lb 2 
b7E 


iLet me know if 


SMET 




NON-RE CORD 


It can work with any format. Right now, it only works with the DCS-3000's CDNRS format, including the archived files. If 
there are other formats you're interested in forward them to me, and I'll tweak the import feature. Ifs capable of running on 
a Trilogy machine, but I'm not sure if "foreign" software is allowed on a Trilogy computer and, I'm not very interested in 
having to deal with Trilogy police at HQ in order to a get it approved .... They are very unreasonable and difficult to deal 
with. 



I have used this a couple of times and probably will move it to an agent workstation to see what they think. 

I do like it. The formatting of the spreadsheet and link is clear (and slick!). Because we can use j l at the DCS 
computer for real-time work, that will probably take precedence for highly reactive-ongoing viewing especially if a 
trilogy computer is not easily available. 

When you say "cdnrs formatted data"-you mean only the files that reside with "cdnr" extension, right? Not files in the 
cdnr folder created after a save? 

Since it is the cdnr folder files we use for uploading and for viewing in Excel, I l l would rather see that file used 
for processing with the CDNRSites tool. Could not the tool exist on the trilogy desktop as well? 

For example, the agent saves data from his target (cdnr format) to a disk and walks it to his desk, then clicks the ^ 
CDNR site icon on the trilogy desktop and navigates to find his file and clicks away. I see this as happening more 
frequently. 

be 

Original Message--- b7C 

From: I I (OTTO (FBI) 

Sent: Wednesday. May 0 3. 2006 9:55 AM 

To: I I PX) (FBI) 



158 



Subject: CDNRSites 




NON-RECORD 


□ 


bo 

b7C 


Your office has been randomly selected frnm a Hal 
couldn't come up with anything better)! 


called CQNBSiias 0. 


review and save the created spreadsheet by clicking on the File/Explore menu items. 
I have already installed the application on your .3 machine. Let me know if its useful. 

□ 

_UMn flSRIFIFn 


fee 

b7C 


~l(OTD) (FBI) 


Sent: 

To: 

Subject: 


□<OTD) (FBI) 




Tuesday. Mav 02. 2006 4:29 PM 

K CTD) (FBI) 


1=1 „ 

Access to the information is controlled by the field office T he field office may generate the I report for the target and 

share it at will. The attached file is an example of A te port 11 1 

□ 

||y-| 

70 | “lA II.rpt 


b6 

b7C 


b6 

b7C 


b2 

b7E 


— aff,ffl?y ' u ; * 

■56 PM 

ICCTDHF 

IcnwFBr 

BI)J 1 (DE) (FBQ| ICTD)(FBI);[ 


159 


Sorry for all of the questions. We are just trying to get a handle on this system. 

We have a domestic number that is under FISA coverage and the number is potentially receiving overseas text 
messages. Is the text message information (content and overseas number) being captured in the DCS-3000 system? 
If so who beyond the field has access to this information. . . for instance would HQ translators have access to the text 
message content from overseas text messages for translation? Thanks, 

Sincerely, 


— Orig inal Message- — 

From: ■ |(OTD) (FBI) fc 6 

Sent: Tuesday, May 02, 2006 3:4 0 PM b7c 

To: I I (CTD) (FBI) 

Subject: RE: 

SECKM 7/ORCON.NOFORN 
RECORD 31 S 


There is no cent ral data base for i I nessaaes. The field office responsible for the collection may generate soft- 
copy "reports" o l i ctivitv on a per target basis from the DCS-3000 system, but there is no automated or 
standard practice for this reporting function. 


KUUjIf X™ b E) (FBI 

~ SbfckbT7/ORCON.NOFORN 
RECORD 315 


Good afternoon. ! M entioned that you would be the cnrrert person to contact regardin g 1 

messaging and tne content and telephone numbers associated with l Is ent/received from FISA covered 
cell phones. Do you know if HQ entities are able to get access to the database, which houses the text 
messaging information? 


We are hoping to review rr 


s and conduct analysis on them. Do you have the name of the database? 


Is there a way for TITU to look at It to ensure translations are being conducted and numbers are being 
submitted for exploitation? Thanks. 


CTD/1TOS1/APU/ 
FBIHQ, LX-1/4W, 106 


160 



Not directly - only indirectly by requesting the information from the field office responsible for the collection. 

b6 



Are HQ entities able to obtain access to the "DCS-3000 system"? Thanks. 
Sincerely, 



— Original Message — 


SEKKET 


161 




o 



Sent: Tuesday. May 02. 2006 3:40PM 

To: I c rm (fbi) 

Subject: RE: 


he 

fo7C 


he 


b"7C 


There is no centcaLdatabase for | [ messages. The field office responsible for the collection may generate soft- 
copy "reports” of i I activity on a per target basis from the DCS-3000 system, but there is no automated or 
standard practice for tnis reporting function. 


□ 



JCTD) (FBI) 


RECORD 315 


b2 

b7E 


I I mentioned that you would be the ora a gt. person to contact regarding ! | 

le content and telephone numbers associated with | |ent/received from FISA covferetr 

cell phones. Do you know if HQ entities are able to get access to the database, which houses the text 
messaging information? 

We are hoping to review messages and conduct analysis on them. Do you have the name of the database? 

Is there a way for TITU to look at it to ensure translations are being conducted and numbers are being 
submitted for exploitation? Thanks. 

Sincerely, 


CTD/1TOS1/APU/ 

FRIHQ I X.1MW 106 

Secure:|_^^_J . 

Pager 877p |] 


b6 

b7C 




SEI 
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There is n o centra l database for t I messaaes. The field office responsible for the collection may generate soft-copy 
"reports" o \ t ctivity on a per target basis from the DCS-3000 system, but there is no automated or standard practice 
for this reporting function. 

□ 



RECORD 315 fo7C 



Good afternoon. 1 t nentioned that you would be the correct person to contact reaardina l I 

messaging and the content and telephone numbers associated with ! I sent/reeeived from FISA covered cell 
phones. Do you know if HQ entities are able to get access to the database, which houses the text messaging 
information? 

We are hoping to review messages and conduct analysis on them. Do you have the name of the database? 

Is there a way for TITU to look at it to ensure translations are being conducted and numbers are being submitted for 
exploitation? Thanks. 




~ I OTP) (FBI) 
1006 10:36 AM 
|ITOD)(CON) 


From: I 

Sent: 

To: I 1 

Subject: Kt: uCt> trace me 


NON-RECORD 



It's probably best to refer the people with questions to me or 


Thanks, 

foo 
b7C 

— Original Message 

From: I l lTODVCONl 

Sent: Tuesday. May 0?. fl rl? AM 

To: I I fOTDt (FBI) 

Subject: DCS trace file 


□ 


J My new number is 703| 


NON-RECORD 


[ 


We have been ge tting question from some customers on how to find and download the trace file from the DCS3000 
fo l p alls. Could you give us instructions so that we can pass them on when needed. Thanks. 


b6 
b7C 

— mrr 


fo2 

b7E 


164 


SEJ 




T 


b6 

b7C 


be 

bVC 


3 °iam 


From: 

Sent: 

To: 

Subject: 


be 

b7C 


J(OTD) (FBI) 


RE: 
not fror 


PM) (FBI) | | 

[items mliprtinn CDC on DCS6000 when also collecting on DCS3000 fron | p ut 


Problems mltertint 
fronj I 


UNCfe ASS I lTCP 

NON-RECORD 


n 


I check the Vanguard logs at ERF, and it looks like we were sending the pen data to both the DCS-3000 and VB3 at one 
point last week. That is, the same call data was sent to both systems during a window of a couple of hours last week. I 
can get the specific date and time if you need it. 

I'm still trying to decode the l l iessaoes for vo J l araet. I’ve asked|___|o put our test phone up with | | so 
we can control the messaging and try to figure our their new encoding scheme. 1 1 


□ 


b2 

b7E 


— Origina l Message 


□U 


](OM) (FBI’ 
131PM 
(OTD) (F 


lnTm (FBI) 

TOM) (FBI) __ 

Problems collecting CDC on DCS6000 when also collecting on DCS3000 from! 


|(OM) (FBI);I 


b2 

b7E 


NON-RECORD 


This really has us scratching our heads. As we reported earlier we have a title III up on|_ 


|phone 

We 


which we previously had a pen up on (in the DCS3000 but it expired it was no longer collecting in the DCS3000] 
entered the CDC input in the DCS6000 and were collecting the CDC fine until we added the target back into the 
DCS3000 (based on the Till order date) at which p oint the data appeared to quit flowing to the VoiceBox. When we 
removed the targets from the two DCS3000 clients | J 

lour CDC started showi ng up again in me voice bsox/uusauuu. 


We went up another target tonight ! ( phone, which we also had programmed and still 

collecting in our two clients/ DCS3000, we enabled the lines on the VoiceBox system, including the CDC input and we 
seem to be collecting CDC just fine on all clients and the VoiceBox. Whenever one of you get s a chance would you j 
mind checking the two carriers in our Multiserver - 1 looked and didn't see anything different on I ] 

really but would feel better if someone who really knew what they were doing would take a look. Thanks guys! 


Federal Bureau or investigation 
Omaha Division 

10755 Burt St., Omaha, NE 681 14 



Desk 

Fax 

Main Office 


b2 

bo 

b7C 


— WNGlABSIFIFn 
- UMCLASSIFIFn 


165 

seiXet 



Subject; Kt: VPN Van Integration 


0 (FBI) 

J06 12:23 PM 
J(OTD) (FBI) 


"D NCLA30 IH6D 

NON-RECORD 


be 

b7C 


b2 

b7E 


Than a 

Yesterday, I was opt tracking a| [ 


Thanks for all of your help!! 

I'll keep testing th j [ and let you know of the results. 


□ 


■-Ori ginal Message — 


□(OTD) (FBI) 


be 

b7C 


To:. C 


RE: VPN Van Integration 


JLA) (FBI) 


NON-RECORD 


b7C 

b7E 


B 


iroblem has been fixed. ^ 


rorks. I have not resolved thi 


□ 


problem yet. 


SE! 


^ET 


□ 




— -Original 

From: 

Sent: 

1 ,I(U) (FBI) 

Monday. April H i(?06 5:37 PM 


To:i 

l(OTD) (FBI) 

lb 6 

Subject: 

RE: VPN Van Integration 


b7C 

** Ol'IL LA'jlj IIUEQ_ 
NON-RECORD 


HeJ I 

* 1 b7E 

All of the targe ts are set up in the .8 machine and in the 10-20 se t-up. 
tkJ bi.mhor |' m having pro blems with isl tvith easel 

The| target number is j J it seem ed to work I asi w eek, bu? l didn ' t get any data ov er the 

weekend. , ■ 

I did just install a new! i n the .8 and the 10-20. It’s working and I plan on going out and 

Track it with the | [ equipment tomorrow. 

Thanks for your help, 


b6 

b7C 


Original Mess age — 

From: I I fCTTP) (FBI) 

Sent: Monday. Anril 74. ?np fi 1:54 PM 

To: I K LA) (FBI) 

Subject: RE: VPN Van integration 



b2 

b7E 


□ 

jhone number? Is it provisioned on the .8 machine with the 10-20 


The "Caught Exception" for the ! Ip hone was a result of the lack of beamwidth and azimuth. I’ll fix 
that on the server here at Quantico. 

What's the | [ target number? I can check the server log to see what happened for the specific target 

Also, this system is not int ended to repla ce the Tracker. Sn jfthe r-ase agent can use the Tracker, I 
would recommend it. The| phould be used foi l I ke operations. 

□ 


Can you give me the) 

in'? L_ 


— Original Mess age — __ 

b6 From: I ~ (LA) (FBI) 

1, Sent: Monday. April 74. 7onfi 7 :04 PM - 

To: I KO TD) (FBI); | [OTDXCON) 

Subject: VPN Van Integration 1 r 

NON-RECORD 


Hey, 

I just wanted to give you an update on the van integration project. 


167 




e 


b2 

be 

b7C 

b7E 


JfK 

mixed results w 
tl fend I set i 


■results with using the VPN for the van integration project. The[ 


rnd I set up last Wednesday in the 1020 works great using the case id 


Jl get every call. However, when I installed anotherl 


_ rl t arget using the case ID I 

got no data. I then tried using the target’s cell phone number instead of the case ID. Using the target's 
cell phone number gave me some data on the van integration laptop, but no LAC and CID or LAT and 
LONG. 


For i l l tied both the case ID and the target's cell phone number. When using the | p ase ID 

with the van integration laptop I received the following: 1 1 



When attemptin g to track d b ell plpje_Lused the target's number and was able to track 
' jWiH I be able to track heij 


Juses the target's cell phone as the case ID. I was able to track a l b ell phone last 

put for some reason could not track it over the weekend. I'll keep trying. We just went up on a 
fugitive pen register and the case agent has requested cell phone tracking. 


't have a pen register for a | *] vith cell sites, so as of right now, 


I'm not sure if it works. 


I'll keep you updated. 


JflefeASSIFIED 

Um 

uflCfcftSSIFlED 


UNCLASSIFIED 

iCCvSSIFIED 



10TD> (F B I) 


From: I I (OTD) (FBI) 


Sent: 

b6 

,Wednesda^PflL2S. 2 QQ 6 4:22 pm 

To: 

1 |LA) (FBI) 

Subject: 

fo7C 

VPKI Van Integration 

UWObASS 

IFIED 

b2 

NON-RECI 


b7E 


□ 

I looked at the l I target problem. I had to use the 10 digit phone number instead of the entire rasa id tn nat it 

work on data from 4/23/06. Also it looks like the server had trouble over the weekend parsing thl 
\ I'm not sure why - it’s working okay now. * 


fc6 

fc7C 


— Original 

From: 

Sent: 

To: 

Subject: 




]LA) (FBI) 

3 16 12:23 PM 
(OTO) (FBI) 


RE: VPN Van Integration 


UNLLflSSlHED 

NdN-ftECORD 


Thanks^^j 






Thanks for all of your help!! 


I'll keep testing th and let you know of the results. 


fo2 

b7E 


— Original Message — 

From: I ' iQTDHFBI) 

Sent: Tuesday, April 15. *6 64 9:53 AM 

b6 To: | (FBI) 

b7C Subject: Kb: VPN VSri integration 


mi 

NON-RECORD 


1=1 

1 p roblem has been fixed. 1 ~| works . I have not resolved the | p roblem yet. 



Original Mcccana — 

From: I L ai (FBI) b6 

Sent; Monday. Ap ril 24, 2006 5:37 PM b7C 

Td i T oTDI (FBI) 

Subject: RE: VPN Van Integration 

"Mg| AQfticpn 

’ NON-RECORD 


m 


hlE 


Hey | | 


All of the targe ts are set up in the .8 machine an d in the- in-?n se t-un. 

Thi inumber I'm haaOflJltatllfilDS with \ 4 I with case[ 

Th q p arget number ; ' " “ 

weekend. 

I did just install a nevl 
Track it with " 


n haaoflJiablfims with i d I with easel I 

isl I It seemed to work last week, but I didn't get any data over the 


:all a ned 

thq [equipment tomorrow. 


] in the .8 and the 10-20. It’s working and I plan on going out and 


Thanks for your help, 

□ 


— Original 


Mess^ge- 


2006 1:54 PM 
I UA) (FBI) 

1 RE: VPN Van Integra tion 

I b N e LftooincD b7c 

NON-RECORD 


b2 

b7E 


□ 

Can you give me the 
setup? 


^phone n 


Is it provisioned on the .8 machine with the 10-20 


The "Caught Exception" for th j p hone was a result of the lack of beamwidth and azimuth. I’ll fix 
that on the server here at Quantico. 


What's th ^ ~| target number? I can check the server log to see what happened for the specific target. 


Also, this system is not in tended to repla ce the Tracker, S o. if the case agent can use the Tracker, I 
would recommend it. Thq [should be used for| like operations. 


□ 


b2 

fo7E 


b6 

b7C 


— Original Mess age — 


a LA) (FBI) 
i2:04PM 


VPN Van Integration 


lOTD) (FfflC 


U+^LASSlUfcTT 

NON-RECORD 


J [OTD)(CON) 


Hey. 


I just wanted to give you an update on the van integration project. 


SEfrfeT 


170 



got no data. I men tried using the target's cell phone number instead of the case ID. Using the target’s 
cell phone number gave me some data on the van integration laptop, but no LAC and CID or LAT and 
LONG. 


fo2 

fo7E 




ig to track a l b ell 
"’ill I be able to track hi 


l used the target's number and was able to track 


fuses the target's cell phone as the case ID. I was able to track al I cell phone last 

Dut for some reason could not track it over the weekend. I’ll keep trying. We just went up on a 
fugitive pen register and the case agent has requested cell phone tracking. 


I don't have a pen register for a 


i cell sites, so as of right now, I'm not sure if it works. 


I'll keep you updated. 


~UN(JJVl>blP«eD 


secWt 




ib6 

b7C 


From: 

Sent: 

To: 

Subject: 


Wednesday > 


□(OTD) (FBI) 
'2.3:06 PM 


J(SecD) (CON) 


RE: DCS-3000 Tier EC and Boundary Document 


ACC ilFIF n 


□ 

The figure in the Word document is accurate. 

□ 


be 

fo7C 


Original ^tessaoe— - 


J (SecD) (CON) 


*006 8:09 ANL_ 
SecDVCO Nt:! 

O)(C0N)L^ 


Subject: DCS-3000 Tier EC and Boundary Document 

Importance: High 


NON-RECORD 


All, 

I have completed an updated architectural drawing. Please take a look and let me know if it is accurate. I want to get 
the Tier EC out this week and get things moving on this system. 

Regards, « File: DCS-3000 Accreditation Boundary Diagram. vsd » « File: DCS3000 Accreditation Boundary.doc 
» 


I 

l 

Sec D/IAS/AU 
( 202 ) | ~| 




M 


sa^ET 


1 


SECRET 

1(°TD)(FBI> 


From: 

Sent: be 

To: fcvc 

Subject: 


Wednesday / 

'kb: WFJ Van I ntegral 


H3(OTD)(FBI) 
,2006 2:58 PM 
] (LA) (FBI) 
ition 


UNCLASSIFIED . 

NON-RECORD 


□ 

Glad to help. Hopefully, you can get the AirCard soon to further test the 
Pig L 

□ 

• — Original Message--- 

f- 6 From: « rran 

lb7C sent: JfaftlfiSlaY. Anril26,20fl6 12:23 PM 

To: I IOTD1 (FBI) 

Subject ' k&m Van Integration 



]for us. Thanks for being the guinea- 

b2 

b7E 


I'll keep testing theQ 

□ 


^Jnd let you know of the results. 

b7E 


— Ori ginal Message 

From: 1 t OTD) (FBI) 

Sent: Tnwriav. Anrii ?<; ?q nfi g-q? am 

To: I ~ KIA) (FBI) 

Subject: RE: VPN Van Integration 

UNCLASS1PIE5 

• NON-RECORD 


□ 

I p roblem has been fixed. | ] works. I have not resolved the[ 

n 


^problem yet. 


b2 


b7E 


— Original 

From; 


Mes ^qe — 


](Lft) (FBI) 




be 

fo7C 


173 


Q 


lb 6 
b7C 



_ _T 

l, 2006 5:37 PM 
IOTD) (FBI) 
in integration 


fc 2 

M | b71 



3FPGET w 

got no data. I then tried using the target's cell phone number instead of the case ID. Using the target's 
cell phone number gave me some data on the van integration laptop, but no LAC and CID or LAT and 
LONG. 



h'2 

b7E 


When attemptin g to track _ r 

| | Will I be able to track hei 


a 


the target's number and was able to track 


ises the target's cell phone as the case ID. I was able to track a l I cell phone last 

week, but for some reason could not track it over the weekend. I'll keep trying. We just went up on a 
fugitive pen register and the case agent has requested cell phone tracking. 

I don’t have a pen register for a | j wiQt [ j so as of right now, I’m not sure if it works. 


I'll keep you updated. 


fo6 

b7C 


UMQfcWSSiRED 


i iKir.i AfismFn 

UNULA&MnCD 
~ UNCL^S talfftHB 
UlTCLAJaJII feD 


inn i ii 1 111 in I 



b6 

b7C 


O 


From: 

Sent: 

To: 

Subject: 



HoimtFD 


I I (OTP) (FBI) 

■ Wednesday. April 6s>. 2QQs 4 23 pm 

I IfOTP) (CON) 

RE: TTEC Question 


« M c m /»MT,.Mri AS » 
NON-RECORD 


I suppose. I'm not sure what a bi-lateral result is . .. . 


— Original 

From: 

Sent: 

To: 

Subject: 

liU I UNCLASSIFIED 
NON-RECORD 


□(OTD) (FBI) 


b6 

b7C 


□ 


b6 I I 

b7C I I 


^mentioned the Canadians using the DCS3000. Can I use this or anything else as a bi-lateral result? 


ERB 

703 


^ SFNWFHii TUHQLAQ8 i nr D . 

I I (OTD) (FBI) 


From: 

Sent: fc6 

To: b7c 

Subject: 


I l(OTD) (FBI) 

' Monday. March 2A 2 U05 i :0S PM 
I i NYl (FBI) 

RE: Needed information regarding Manhattan POTS lines 


TTPSRBT//UOrOB N. 
RECORD 321 C-N Y-229487 


□ 

We had hoped to come up on Wednesday. Did you get the IP address for your new DSL connection? 


□ 


— Original Messa2e^^__ i 
From: I I f NY) (FBI) 

Sent: Monday, March 11, 2006 9:20 AM 


176 




1 



It is my understanding that we do act as a proxy with deliveriaaJfi eir orders. Thq |does that. However, they do 

a lot more surveillance then we do. I will get someone from th a | down here when you guys come to set up the 
equipment for the DCS-3000 move. When are you coming? 1 1 


□ 

Original Message 

From: 1 l(OTDHFBI) 

Sent: 1 MstH 64 Mtflg pm 
To: I K NY) (FBI) 

Subject: RE: Needed information regarding Manhattan POTS lines 

RECORD 321C-NY-229487 







a 


Friday. March 24. 2006 9:30 AM ___ 

>Y) (FBR jl br > (FBI)J 

JNY) (FBI) f J (NY) (ftT r 

!: Needed information regarding Manhattan PC 


Subject: 

RECORD 321C-NY-229487 


](NY)(CON) 


fo6 

hlC 


[=□ 


This is along the lines of what we were discussing this morning. Please contact ! "l and let him know 
our concerns regarding the CDC data. 




be 

b7C 


im each CO (depending on the number of switches). The question is do you want me to contact 
larding a formal request for what we need or do you guys want to handle it. Let me know. 


□ 


— Original Mes sage--— 

From: I ~l (NY) (FBI) 

Sent: Friday. March 17: 2 006 9:13 AM 

To: I | NY) (FBI) 

Subject: RE: Needed Information regarding Manhattan POTS lines 


3CCRCT,7NQ FOR N 
RECORD 321 C-N Y-229487 


bZ 

fo7E 


b6 

fotC 


b2 

foe 

b7C 

b7E 


We are not able to retrieve the information you requested from our data base. In 
me the target numbers /CO location you will have to review all of your target numbers and 
\vith this request. 


Please keep in mind that even though multiple exchanges may originate in the same CO 
they do not necessarily share the same switch within that CO. Any CALEA facilities ordered would be 
specific to that switch. 


IZ^f 


al Message 


□ (NY) (FBI) 


Thursday, March 16, 2006 9:54 AM 

[_ .... A N . Y1 


□(NWCON)[ 


(NY ) (mi ) I ' 1 I KV TT HH i 

Needed information regarding Manhattan POTS lines 




^NY) ^QM) 


RECORD 321 C-NY-229487 


Everyone, ■ 

After many years of waiting,! B 


Coulc j p lease review their data, along with | I, and provide SO-1 with a list of how 
many target nUiYib£r , § come out of each CO in Manhattan only. The outer boroughs will be handled 
the same way we do T-llls with dialup GR-30 solutions. Once we have the target numbers from each 
CO we will determine which type of circuit needs to be in stalled. I I 

I I We would like to have this info by next week 

it possible. tKh will oe nere the week of l-eb. 2/ preparing our systems for this upgrade and we can 
sit down and discuss a plan for implementing CALEA then. 

If anyone has any questions please give me a call. Thank you. 


NYO Squad SO-1 

work: . 21 2-1 I 

cell: 917| 


•be 

foie 


179 


SF^T 



o 



« File: QWESTCALEA doc » 

H i I Disregard my earlier VM about T 1 circuits. I figured that out after looking into our records. T 1 needs to get 
connected into DCS-3000 on Monday for testing. Talk to you then. 




sfJSKft 
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SfaCRblMJhPKW- 
RECORD 321 C-NY-229487 


-fo£ 

fo7C 


□ 

This is along the lines of what we were discussing this morning. Please contact |~~"V nd let him know our 
concerns regarding the CDC data. 


Thanks, 


C 


ssA /m-M 

212 -| 


] 


] 


al Message — 


Subject" hW: Needed 


[NY) (FBI) 

22, 2006 7:31 AM 
“ (FBI) 

IY) (FBI) 

m regarding Manhattan POTS lines 


fc6 

b7c 


■SECRETflMP g™™ 
RECORD 321 C-NY-229487 


U egarding targets at COs in Manhattan. | | s right when he talks about 

t think of that. Which means we will need to build several circ uits from each 


I got the email below froi 
multiple switches at one CO. 

CO (depending on the number of switches). The question is do you want me to contact| 
formal request for what we need or do you guys want to handle it. Let me know. Thanl 


igarding a 


□ 


— Ori ginal Message 

From: I I nyi rFBrt 

Sent: Friday Marrhi7 ?nnfi 9: 13 am 

To: 1 1(NY) (FBI) 

Subject: RE: Needed information regarding Manhattan POTS lines 


RECORD 321 C-NY-229487 


b2 

b7E 


f "1 We are not able to retrieve the information you requested from our data base. In order to 

determine the target numbers ICO location you will have to review all of your target numbers and contact f^ l 
with this request. 


Please keep in mind that even though multiple exchanges may originate in the same CO they do 
not necessarily share the same switch within that CO. Any CALEA facilities ordered would be specific to that 
switch. 


cfT 


kyou 



1(NY) (FBI) 

lay, March 16. 2006 9:54 AM 
| (NY) (FB1);L 


information regarding Manhattan 


I fN YIf CC 

ZFTCnC 


^J(NY) (FBI);Q 


sjgggrognroRN 

RECORD 321 C-NY-229487 





.p lease review their data, along with ! l and provide SO-1 with a list of how many 
target numbers come out of each CO in Manhattan only. The outer boroughs will be handled the same way 
we do T-llls with dialup GR-30 solutions, 
which type of circuit needs to be installed. 


We would like to have this info by next week if possible. ERF will be here the 
prepanng our systems for this upgrade and we can sit down and discuss a plan for 
plementing CALEA then. 

If anyone has any questions please give me a call. Thank you. 



DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. 
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From: 

Sent: 

To: 

Cc: 

Subject: 


I l /OTPl (FBI) 

Thursday. March 23. 2006 1 1 :3am_ . r 

I I fOTD) (FBI); I l (OTD) (FBI);[ 

» j nTm (C0N) 

RE: IT Information Request - Needed by Friday 3/24 


NON-RECORD 


I I b£ 

The cost of the hardware, software, and the development work fnr thp intprfare to the T rilogy network or other FBI IT 7r 
infrastructure for the DCS-3000 system is approximately I I Thp mainrihy nfthic met j S for hardware (e.g. b7 ^ 

routers and other networking equipment). The DCSne t costs are approximate! ^ I f you include the IP 

service contract we have with l I can elaborate on this topic if needed. 

□ 


— -Original Message- — 

From: I k oTD) (FBI) 

Sent; -THuralflY. flarfll 23, 2QQ6 8:56 AM . 

To: I I OTP) (FBI); | |(OTD) (FBI); | | (OTP) (CON) 

Cc: I K OTD) (CON) 

Subject: FW: IT Intormation Request - Needed by Friday 3/24 


fc6 

b7C 


S E NS I TIVE BUT UMCLACC i nCD 
NON-RECORD 


To All, 

Due to the move, please provide l I with all submissions no later than 3pm today, 
the data to send it to the front office later this afternoon. 


md I will gather 


f [ the DCS-60Q0 does not connect to trilogy, operate remotely over an IT system, or prepares data to be sent 
over an IT system. But, how it relates to DCS-NET may be a different story. So as not to duplicate numbers, if there is 
an IT cost for the 6000 and DCS-NET, can you include that number (and notation) with your estimate? Thanks. 


□ 


Original Message 

From: I H fOTD) (CON) 

Sent: Thursday. March 23 . 2006 8:14 AM 

To: 1 l OTD) (FBI) 

Subject: FW: IT Information Request - Needed by Friday 3/24 


he 

hie 


SENSITIVE BUT UNCLASSIFIED 


1 I We should try to complete this task today because tomorrow many of our Trilogy machines 

will be disconnected by 2 pm. Thanks. 


I 

ITD/ESTS/TICTU 

703 l I 


] 


Met 


si 


be 

b'/C 


— Original Message- 

From: 

Se nt: 

To: I 

Cc:[Z 




Tuesday 




— IfOTD^ lEfiDI 


JamiML 


]oTD) (FB r 


J(OTD) (FBlt: 


Tnrm rpanF 


^OTDX 


□iTD) 


IT Information Request - Needed by Friday 3/24 

T UNCLASSIFIED 


NON-RECORD 


fo2 

be 

fo7C 


I t ias asked that we determine the cost of the IT portions of the OTD collection systems listed 

on the OCIO master list of systems, applications, databases, and networks. For the systems/projects listed 
below, please determine or estimate as best you can the cost of the hardware, software, and the development 
work for the interface to the Trilogy network or other FBI IT infrastructure. This will help us separate the 
funding of National Security Systems that are not truly IT from IT systems, databases, applications and 
networks. Please provide an estimate by Friday 3/24. 


DCS 6000 -IT Interface 

DCS 3000 - IT Interface 

b2 

b7E 


Thanks, 


ELSUR Management Technology Unit 
Electronic Surveillance Tech nology Section, OTD 


3 I 


SKNSITtVS 1 



SENSITIVE BUT 


SENSIIlUb BUT 

■tlNGLAKSIOED 


SENSmVk BUI UNLLAA3II ILU- 
SEMSUIM&BU T UNCLASSIF I E D- 
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From: 

Sent: 

To: 

Subject: 


](°TD) (FBI) 


I KOTP) (FBI) 

Wednesday. March 15. 2006 6:38 PM 


Kh: Movement of 


JNY) (FBI) 
T!y Dcs-r- 


■3000 



fob 

b7C 


NON-RECORD 


AgftlFI,=n 


Sounds good. Do you have any estimates for the number o n I switches you want to cover with GR-30/CALEA? We 
can install our GR30 solution when we visit - we just need to know how many switches we need to handle. 


be 

b7C 


I ~I nY) (FBI) 

5:37 PM 

' j (QTD) (FBI); [| 
i T7ny7 (fbi) 

Movement of NY DCS-3000 


□ (OTD) (FBI); [ 


SENSITIVE Bl 
NON-REI 


b2 

fo7E 


Guys, | 1 — I 

I got word today that ou|__Jine should h e in nn 3/23. I think you can plan on coming up to NY the week of 3/27 
to move our DCS-3000 and pushing the info intcj | Let me know which date works for you. Thanks. 


NYO Squad SO-1 
work: 21 2-1 I . 

cell: 917 1 I 


be 

b7C 


ccucitiwc 


188 




SEI 





RECORD 315 


nn 

I spoke to l E arlier this week, and they said they made the mistake on the 9094 number - they entered the wrong fo2 

stop date of 3/1 (I think it was 3/1). They seemed to think the correct stop date is 3/16 - you may want to check with them be 
to make sure they have the right stop date. hie 

b7E 

As for TA upload, the CDNRS format the DCS-3000 uses does use underscore delimiters and this works with TA. I'm not 
sure about the comma delimited version. All you have to do is use the "Save" feature on the DCS-3000 Client to generate 
uploadable records for TA. Just give me a call if you want me to show you how to do it on your DCS-3000. 

□ 

— Original Message — 

From: I H nyi (FBI) 

Sent: i c 2006 3 : II 

To: 1 KOTD) (FBI) 

Subject: 1 PCS 3000 1 

-SECRCT/ZNOFORN 
RECORD 315 


Hey fellas, 

I'm not certain if it was! fi r you fellas but thanks for fixing the VOIP collection for i I C an 

someone look at l i This number was instituted a few weeks ago but no pen data comes up. The audio 

looks OK. 

Also, SO-1 has been instructed to begin uploading FISA pen register reports from Counterterrorism targets into the 
Bureau's Telephone Application database as standard practice. Unfortunately, the FISA pen records are separated by 
dashes as a delimiter. The pen reports on the criminal side, which have been uploading on a regular daily basis, use 
commas. Can you fellas change the interface at ERF to send the FISA pen data with commas instead? 

Looking forward to seeing you fellas again when you install the equipment for the DCS3000 push into | ~| h2 

b7E 




H^ET 

1 


From: 

Sent: 

To: 

1 l(OTD) (FBI) 

Tuesday. February 28, 2006 10:31 AM 
1 L£L D ) (FBI) 

Cc: 

Subject: 

| fOTDHFBI) 


9 


fo6 

b7C 


UNLLASairibU 

NON-RECORD 


□ 


tasked me to contact you regarding cell site information. TICTU n 


information fro m many carriers for use with the DCS-3Q0Q collection system and the 
Boolications. TICTU also has developed an online utility for Trilogy uj 


iCify the carrier, the switch identity, and the | p entity, ; 

\C: 167 Gust enter 167 in the LAC field), and then select any of the 


□ 


From: 

Sent: 

To: 

Subject: 


l(OTD) (FBI) 

I , „ _ ] (OTD) (FBI) 

Monday February 77. ?nnfi 5:29 PM 

QzSP C 6,,fb '’ 


UHGLAOQ I F tCP- 

NON-RECORD 


lb 6 
b7C 


□ 

The | | messages are in file, which is opened, on the .55 Low Side DCS-3000 computer. 

□ 


— Original 

From: j 


To: ' [ 

Subject: 


1 (CG) (FBI) 

;:"'Ke5njarv 27. 200 6 10:09 AM 
IOTP) (FBI) 


’" T J NCLAGW EIEEL 

N ON r-R E CORD 


b6 

b7C 


b2 | 
b7E 


Will you please al l I data for the following number "5061". Thanks 


- MHCLMSSII IEB 
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EET 


From: 

Sent: be 

To: b7c 

Subject: 


| (OTD) (FBI) 

l-ebruarv U4 . 2(m:43 AM 
I (NY) (FBI) 
lupgrade and CALEA 


Do you have the DSL connection yet? If so, do you know the static IP address? 

□ 


:riav- FphmarvM S. 2006 7: 5S P» 
lupgrade and CALEA 


Sounds great. Whatever you need let me know. 


— Ori ginal Message — 

From: I I (OTP) (FBI) 

Sent: Wednesday, February IS, 20QfLi2LEfc 

To: I fNYUF Bn l 

Cc: I fr OTD) CFBI'll 

Subject: REI lupgrade and CALEA 


I just spoke with | | Everything seems to be in order. We'll see how this thing works on the 

cluster ring.... . . 

Tentatively speaking, week of 27Feb. We'll give a definite date after I speak with | j to check 
his schedule. 1 1 


rfiVft 


o 


^RE 


R fl I jpgrai 
Higfi 


l0TD) (FBdE 


ids and CALEA 


□[IW) (FBI)C 


□(NY) (FBI) 


NON-RECORD 


Hign 


he 

b7C 


h>2 

fo7E 


1 am forwarding this message to[ 
till 2/20. The^S-3000 is now in the SI 


shield. 

What we can do is run a l< 


Mt o get some of the answers for vou. l I s on Vacation 
s probably about 150-200 feet between the DCS-3000 and 

to I I 


T5 from the port and move the DCS-3000 closer to[ 

In NJ. What we will probably need to do is get an 
We can create VLAN over the SONET Ring to get the info 
lave a DCS-3000 out there for contingency purposes. You will 


o you can order two 50 ft cable; 
adclitionaf DCS-3000 for our NJ site where [ 
out there. Also, it would make good sense 
ne ed a 5 0 ft. cable for out there too. 

I 1 

I will be ordering a static DSL line into the Shield in the next couple of days. I got authorization to put it 
under our covert Title III account. 

Thanks for the help. 

j j bvc 

1 NYffSquad 5QJ 1 
work: 213 

cell: 917[ 


be 

fe7C 


Original 


To: 

Cc: 

Subject: 


'V-[ ppgri 


February 15, 2006 8:46 AM 

Lvn fFRH 

|(OTD) (FBI)£_ 

TSLea 


S ENS I T I VE PUT UNGLAGO IHEP 
NON-RECORD 


]NY) (FBI) 


b2 

b7E 



In preparation for the One Way Push installation I'll need to know what length serial 
cables are needed. 

Typicall y, we install the Lowside Server into the DCS-6000 rack and the HiSide Server 
into the | r ack- We then connect the two servers via serial cable. With that b eing 

said, how many One Way Push systems are required -I . . l or all? 

How many DCS-6000 systems do you have - three like the ! e nd in the same 

locations? Do we have the rack space in the DCS-6000 for a 2U Server, or if we are 
required to put more than one in a rack? Do you have enough KVM ports avai lable o n 
the DCS-6000 KVM switch for (3) servers? Do you have one free port on ean H k vm 
switch? What lanoth serial cable is required to go from the DCS-6000 rack to | | 

1 I Do you have enough UPS ports and power to handle the 1 additional 

equipment? Three servers use 750W and the other three servers use 150W. Please let 
me know so that I can get the cables made to size. Usually we use 20ft, 35ft, and 50ft 
denomonations. Please call if you have any questions. 


Thnx, 

i 


fo6 

lb7C 


192 


SFb^FT 




9 


be 

b'/C 


foe 

fo’7C 


foe 

foTC 


foe ’ 

b7C 


Mess^e- 




:ET 

□CNY) (FBI) 


Subject: R^_Jjpgrade 


Thursday. January 26,2006 9:03 A 

— -JBTP) (fbdl_ 

Ij(OTO) (FBI) 

TJlea 


fo2 
fo7 E 


“know you are avoiding me. The sooner the better. We will start 
Once we get those working, we will start on some CALEA T-ls. 1 have the| 


regarding how many targets come from each CO. We will start wi th the bidtreSTCj entral Offices first and 

: “ " ■ ‘ 1 iw.|_ 


then go from their. Once I have some numbers I will let you know.L 
the DCS-3000 here if you have any questions. Talk to you soon. 


:rjs 

liUfe 


DCS-3000 targets first. te6 
iking a list for me ) b7c 


b the TTA in charge of 



] (OTD) (FBI) 


NON-RECORD 


I I 

I spoke wit H t oday and he has already discussed | Issues and 

concerns at length. We discussed some possible system configurations, 
implementation approaches, and pilot testing. Upon my return to ERF, we will 
complete our configuration prepa rations, p erform lab tests to verify operational 
performance, and will prepare for i I nstallation. More details to follow. If you 
have any further questions, feel free to give us a call. Hopefully, mid to later-part of 
Feb2006? 



PS - We aren't avoiding you, just stalling for opening day at Yankee Stadium... 



I (NY) (FBI) 

‘ 2006 9:17 AM 
I) (FBI) 


NON-RECORD 


WIMP ftSSIFJED 


^ lie uj 


igrades we just did on I I should allow us to do CALEA now, corre ct? I want I I to 

work wit H i n my office to push all our FISA from the DCS-3000 into I Bind see how it 


SEI 




193 


works. Let me kfio^when we can do this. Soon is better than later. 

T^think a vacation in NY for a couple of days is just what you need. What do you think? 


c 


□ 


NYO Squad SO-1 
work: 21: 

cell: 91 7 \ 


T U N CLAeC i riCO 




I |OTD) (FBI) 


From: 

Sent: 

To: 

Subject: 


c 


□(OM)(FBI) 
Ail PM 


be 

b7C 


I kOTD) (FBI) , , 

RE: Pro blems colle cting CDC on DCS6000 when also collecting on DCS3000 froml Ibi 

not from j | 1 J 


n 

you ca 


'Tou can dis regard thi 
oettin J b ccordina 


decoded on their end - in talking t d l ias 
"it in order for i 


(messages from l I the issue may be th at I I d 

orde r. And e ven though they are sending th d I t 


|doesn't think we are supposed to be 
sounded like it would nee d to he 


past Friday they left me with the impression they have to decode the | | on 

us to be able to read it (I may have misunderstood what they were sayihg or 


their end before they send it out ir 
the pereonjspoke with may not have been completely aware of the process involved th ough} . They said if we specifically 
reques j |n ot just a general statement for all wire communications, they will send th q p ecoded. O ur cnc talked 
to tha lea ai mlxs back east and it sounds like they are of the opinion that "wire cq mmunicatlgfl'5 1 may includ J I 

~ ' I which falls into "stored communications' 


1 I nformation but we have to specifically reques 
not wire communications - this legal crap is 


Regarding the CDC that was goin g to this ! 


to keep up with - everyone keeps changing their minds. 

‘ only when we didn't have it plugged into the DCS3000 - I'm still 
5 gnd it to two different Case IDs - they still haven't gotten back to 
^phone, tried sending the data to both the DCS3000 and lb7 E 


looking into that on our end. I asked | I f they 
me. The weird thing is, we went up on another Til l 
Voicebox and we're getting it both places without any trouble. Only difference is this target was already active in the 


194 


DCS3000 before we plugged it into the Voicebox while the other target we activated in the Voicebox first and then tried to 
plug it into the DCS3000 - that and the different carrier. Both boxes are looking at 1 56.80.0.7 port 5000 for a socket . The 
DCS3000 is also pinging the IP and "keep alive" is checked which apparently makes no difference because ! | s like 
that also. , . i i 

Oh well, thanks for you hel d I Sorry to send you on a wild goose chase if | j has to decode SMS before they 

send it - 1 thought that's what our decoders were for. 

□□ & 


From: 1 

te2 

(OTD) (FBI) b7E 

0:59 AM 


To: 1 i 

DM) (FBI) 1 1 | | 


DC on DCS60QO when also collecting on DCS3000 fronj put not from! 1 


Hliri nrrinrrr 

NON-RECORD 


□ 

I check the Vanguard logs at ERF, and it looks like we were sending the pen data to both the DCS-3000 and VB3 at 
one point last week. That is, the same call data was sent to both systems during a window of a couple of hours last 
week. I can get the specific date and time if you need it 

I'm still trying to decode th j I nessages for you! I target. I've asked | | to put our test phone up witlj | 

so we can control the messaging and try to figure ounnSTPnew encoding scheme. | | 

|— I 

I I b7E 


■o 



Subject: Problems collecting 


, ](OTD) (FBI) 

J COM)(FBI) I , 

100 when also collecting on DCS3000 fronj but n< 


b2 

toe 

fo7C 


This really has us scratching our heads. As we reported earlier we have a title III up or l B I 

phone which we previously had a pen up on (in the DCS3000 but it expired it was no longer collecting in the 
DCS3000). We entered the CDC input in the DCS6000 and were collecting the CDC fine until we added the 
target back into the DCS3000 (based on the Till order date) at which point the data appeared to quit flowing to the 
VoiceBox. When we removed the targets from the two DCS3000 clients (one in our Till room using tracker app 
and one in our system admin rnnmt pur rnn started showing up again in the VoiceBox/DCS6Q00. 

We went up another target tonigh t! f ahone. which we also had programmed and still 

collecting in our two clients/ DCS3000, we enabled the lines on the VoiceBox system, including the CDC input and 
we seem to be collecting CDC just fine on all clients and the VoiceBox. Whenever one of you gets a cha nce 
wou ld you min d checking the two carriers in our Multiserver - 1 looked and didn’t see anything different on ! I 
fron j l eally but would feel better if someone who really knew what they were doing would take a look. 
Thanks guysf 


Federal Bureau of Investigation 
Omaha Division 

10755 Burt St., Omaha, NE68114 


b2 

b7E 


402 

402 

402 


195 


From: 

Sent: 

To: 

Cc: 

Subject: 


NON-RECORD 


« (FBI) 

Fririgw Anril Oft ^fta-SIPM 

| (OTD) (FRIVl I/QTD1 (FBI) 

P M) (FBI 1 | (OMHFBI) . . 

Pro blems fle eting CPC on DCsBUUU when also collecting on DCS3000 fro mj | but not 

fo2 

b7E 


This really has us scratching our heads. As we reported earlier we have a title III up on l L hone 

which we previously had a pen up on (in the DCS3000 but it expired it was no longer collecting in the DCS3000). We 
entered the CDC input in the DCS6000 and were collecting the CDC fine until we added the target back into the DCS3000 
(based on the Till order date) at which point the data appeared to quit flowing to the VoiceBox. When we removed the 
targets from the two DCS3000 clients (one in our Till room using tracker app and one in our system admin room) our CDC 

started showing up again in the Voi ceBox/PCS6000. 

We went up another target toniaht l iP hone, which we also had programmed and still collecting in 

our two clients/ DCS3000, we enabled the lines on the VoiceBox system, including the CDC input and we seem to be 
collecting CDC just fine on all clients and the VoiceBox. Whenever one of you gets a chance wo uld you mind checking the 
two carriers in our Multiserver - 1 looked and didn't see anything different on | "[ really but would feel better 

if someone who really knew what they were doing would take a look. Thanks guys! 


b2 

h7E 

b2 

be 

b7C 



Federal Bureau of Investigation 
Omaha Division 

10755 Burt St., Omaha, NE 68114 



196 



□ 

Spoke to JSI, DITU and others trying to resolve this problem - was hoping you might be able to help. 

□ 


Thanks for any help you can give “LJ if you'd rather reply by phone my number is 402- j [ THANKS for you 

t-eaerat Bureau ot investigation 
Omaha Division 

10755 Burt St.. Omaha, NE 68114 £“ 

b7C 


Office 



WORK COPY OF SESSION 





I called the guy fron | i lhnnl< th d i e provided and told him we needed the lAPSystem 

IDs because there were flubhcat a I in some cases. He said the sites are for both Iowa and Nebraska so 

there may be duplicate site numbers but that the lat long associated with l I I be different and he didn't understand 

why we needed the lAPSystem. I didn't have a good explanation as to why we needed it. Would it help if I broke the 
spreadsheet up into Iowa and Nebraska rather than having them all in the same spreadsheet? The guy didn't sound 
to enthused about sending any additional info, he seemed to think what he provided was sufficient. If you have to have the 
lAPSystem IP's I c an try to look them up on the internet and add them to the spreadsheet when I get some time, I think 
I l onlv has three switches in our Division, davenport IA, des moines IA, and Omaha NE. Let me know if b 

•you have to have the lAPSystem info, and I’ll either add it myself or give this guy a call back and give him a better 
explanation as to why we need it. 



knows we're t rying to set up this tracker system). Do you already have data for Iowa and Nebraska or do we need to 
contac| jto request it?? 


Also if you would like, I'll submit an RMS request for your help on this so you can show you're spending time on it. I 
can't think of any reason whv not to submit an RMS request but let me know one way or the other when you have a chance 
to reply. Thank^ j 


Om aha di7~ 
402| 


— Original Mssagfcrrr . 

From ! 1 mm (FBI) 


Sent: Tuesday, November 09, 2004 9:32 AM 


Ib2 
fo 6 

Subject: REj j 

~~|for Omaha Market 

fovc 

foVE 


□ 


I looked at th< 
you get the b 


□ 


lata. It appears this set of data is for more than one | S witch (I 
smIDs (a.k.a switch ids) for these switches so that I can accurate!' 1 


unique). Can 


fo2 
lb 6 
b7C 
b VS 


— O riginal 

rnml 


Message- 


U(OM) (FBI) 

L 2004 5:44 PM 
lUB) (FBI) 

Jcell tower location for Omaha Market 


~UiJ(JUVS3ll=*6ft - 

NON-RECORD 


fc2 

fob 

fovc 

fo7E 


□ 

wanted to try to get these cell tower locations to you for the database out there as some of our case agents are 
looking forward to using the track er and backtrack software on a couple cpus we just configured as DCS3000 


clients in our Till rooms. I "t ent us two of three markets that had lat longs associated with them but on a third 
itly left the lat long off (the DesMoines market - 1 made a follow up request for lat longs on 


market they inadvertently Ie 


the last market but haven't heard bac k from them vet). A nyway. I wanted to get this to you so we might be able to 
• jni L 1* ■ * ■ 


start using the tra cker softw are on the [ 
me know. Thanksl I 


. If I need to ask for something additional please let 




rSt/r-i 


199 


J(OM) (FBI) 
2Q04 5:44 PM 
n (ITD) (FBI) 


b es Moines I ] Omaha NE I I Davenport Ia I 1 

IA Market 20... Market 2004-09... Market 200... IA_NE_Slte_Co... 


□ , - 

Wanted to try to get these ! l o you for the database out there as some of our case agents are looking 

forwar d to usin g the tracker and backtrack software on a couple cpus we just configured as DCS3000 clients in our Till 
rooms l I sent us two of three markets that had lat longs associated with them but on a third market they inadvertently 
left the lat long off (the DesMoines market - 1 made a follow up request for lat longs on the last market but haven't heard 
back from them ve tY Anyway. I wanted to get this to you so we might be able to start using the track er software on the 
| frill. If I need to ask for something additional please let me know. Thanks! 




Here's a li st of thj m I n Iowa a nd Nebrask a. The contact for this info wa a I 

1 (phonetic) wit H I Regulatory Dept., 425 1 I He said he was going to include a 

printable spreadsheet and an importable one where the lat long was in "decimal" format. Looks like we are going to be 
trying to get a couple of computers up in the Till rooms which will be used with the tracker and backtrack software. The 
cpus will be loaded with win2000 only to start with. I'm assuming we will need to load the DCS3000 software on both 
machines. Do we have a site license for as many copies of the tracker software as we need or is that an issue? I'm going 
to take a look at the DCS3000 Manual and win2000 to see what kind of restrictions I can put on the two computers to 
make sure people don't start mucking up data on the DCSNET. Not to crazy about them being networked on the same 
system as all our elsur stuff. If you guys have any suggestions on how we can make sure things don't get fouled up we'd 
appreciate any advise. Thanks guys! 




| | number was in original email - seen below. Hope that helps. 




SE( 



Subject: 


T 


I can check the DCS-3000 collection system to see if we have collected anj |ne: 
the number, 1 1 


s for the target. I just need 


— O riginal Message- 
From: r IfCTDj (FBI) 

Sent: Wednesday! fflavfl). 200 6 7:54 PM 

TO! f , I (OTD) (FBI) 

Subjecf h subject's cell phone 


~* lEtttET//ORCON,NOFORN 
RECORD 315N-SU-S8518 


In speaking with ! 1 1 am told you would be able to verify if our subject is using hid Iphone for 

text messaging - or for that matter, receiving text messages. If I give you his cell phone, can you assist? We 
currently have switch packet on his cell, but we only pick up the voice conversations. 


Thank you for any help you can provide. 
Please call or email if you have any questions. 





•PERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foi 
DECLASSlFlgAXinN^ FXEMPTinM 1 


HftWFD FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreion Counterlntellioeni 
DECLASSTmWQN EXEMPTIO N 1 
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From: 

Sent: 

To: 

Cc: 

Subject: 




aeptempe f 

i0TD> (FBI) 


06, 2006 2:34 PM 


|MM) (CONjt 


D) (FBI) 
IOTP) (F BI)[ 
l(fuW 


iS-3000 client computer 


(MM) (CON) 


M)(FBI);[ 


3 


•ONlLAb ^lffED 

NON-RECORD 

□ r t 

After talking to l i Miami is requesting a DCS-3000 client computer to hook up into the Plantation ncs-annn so 

that the case agent can actively track their cell phone target real time. Any questions please call me at 95 4 I 

. Thanks 

I 1 


From: 

Sent: 

To: 

Cc: 

Subject: 



](SA) (FBI) 

5:01 PM 

ITD) (FBI) 


1 DCS-3000 In De l 


QPMttlTIW PI IT I IM^I AQQIPIFn jo6 

NON-RECORD to7C 


□ 

We are currently working a drug cases on the border (Del Rio, TX), and are up on 3 pen registers for | t ell 
phones. Could you please upgrade/provision our DCS-3000 in Del Rio RA with the map tracking software. 

Thanks 


San Antonio, TX 


‘ ?c ‘ lglT ' 1,g °" T 


SfiTRFT 
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Q 


From: 

Sent: 

To: 

Subject: 


b2 

be 

b7C 

b7E 


lOTD) (FBI) 


1 reT 


JMY) (FBI) 
22-2005 10:20 AM 
l(ITD) (FBI) 


UNGLAQQIflGO 

NON-RECORD 


b7C 

b7E 


n could I get ad ded to your SBIT user list, please? Also, you may know this already but, in dealing with both! 

I bag „.„.j - 1 


& 


C urrently does not require any extra verbage in th e court orders to release this info rmation bi 
require that in addition to the standard 2703d orders th at . I be indud< 

the order for them to enable their location based service l | also advises that the customer/target may see 
i I on their screens. We've used this a couple of times and it hasn’t yet become an issue. 


idy of 


Both companies are also trying to keep this genie in the bottle so that it doesn' get overused, neither is adding an 
additional charge for now. If and when it gets out and overused (DEA, USMS) the charges will follow and tis usage 
will inevitably be restricted. Just FYI. Thx-TB 


NON-RECORD 


SBIT Customers, 



If you wish to use this _newservice, you must have a valid court-order » <ith nniri rr.»o rago Tn Hotormino »mi b7E 
~~|nd to use the new service, contact! Isecurity group at| | 


Good luck, 
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" unCDmsieied 


be 

b7C 


-U H0LA33IFTCD 


| fOTD) (FBI) 

From: i l (CG) (FBI) 

Sent: , Tuesday. .November 15. Zpos 9:01 am 

To: I I (OTD) (FBI) 

Subject: RE: Chicago new building 


NON-RECORD 

□ 

I'm in NY this week so m aybe vou a nd | I could talk about this a little more. Basicallv .1 I s supplying new ^ 

workstations for all of the ! e nd VB work stations, we are not moving the old ones. By workstations, I mean a L t 

computer table/desk to set the client terminals on and for a LS or A oent to work at. It would be nice to have two additional, jr 7r , 
matching work stations per T-3 room to set the DCS3000 clients o nl bad not panned to purchase these. I was .V" 
inquiring on the availability of budget for buying new ones to match | f iew ones j I could tell you the cost. If this is J 

not an option, we will probably have to select the best ones from Clark street to move. It would be much more desirable to 
have units that matd | ~j f° r fit and function if there is a way to pay for them. 

I'll try to check e-mail as I can, let me know what you think. 

Thanks^ 


Sincerely, 


Chi cago Divisi on 


312 

312 


Jpifice 

tell 


be 

b7C 


J (OTD) (FBI) 


r. Nove mber 14, 2005 10:57 AM 
l( CG) (FBI) 

JOTD) (CON) 


Subject: FW: Chicago new building 



NON-RECORD 


□ 



be 

b7C 


Our plan is (was ?) that you will be moving your existing DCS-3000 workstations to the new site. Is this incorrect? 

□ 


— OrifliflaLMessaflfessa- 

From J I (OTD) (CON) 

Se nt: Monday, November 14, 2005 8:19 AM 
To: l I fOTDl (FBI) 

Subject: FW: Chicago new building 


UNCI ACE IHED 
NON-RECORD 


n 

Any idea on whom this request/inquiry should be forward to? 


b6 

b7C 



] (OTD)(CON) 


be 

b7C 


□ 


V^eaigjQgkina our plans to move into our new Chicago Office in April of 2006. I have been working with I ~1 

j b roupi and they are supplying workstations for our Voice Box ar>H | i *‘ liiar ] 1, terminals in ourT-3 

rooms. The "workstations" are basically a 48" wide work table with shelf for the VB or l fc lient computer to sit b2 

on so an Agent or LS can sit and monitor the T-3 or FISA. They tell me that they have not planned to supply b7 e 

workstations for DCS3000 terminals. Every T-3 room in Chicago has two DCS3000 terminals for live pen monitoring 
and cell site information. Does your group have a facilities person or budget to supply workstations to support the 
DCS3000 terminals? Can you recommend someone from your group that would be the appropriate contact person for 
me? 


Sincerely, 


Chi cago Divisi on 
312 - 1 I ofGce 


be 

b7C 
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bo 

fc7C 


U MC L ASS I Hg e- 


b6 

b7C 


From: 

Sent: 

To: 

Subject: 


ifOTDl (FBh 

I (FBI) 

, WftrinRfiriflv, NavamfraLPA 2004 9:33 am 
j i 1 l(ITD) (FBI) 


@r 

tech.glf (951 B) [ 



3b2 

b7E 


NON-RECORD 


be [ | , the attached is a list of l | j i West (by God) Virginia. I hope it is in a format that 

b7c can b e added to TRACKER. Mv otheT eancsrn Is that the DCS-3000 has not included any cell site ID 
for the ) | pens. The location is authorized, maybe | sn't sending it. 


207 



Several months ago, I spoke to you regarding our task force squad that purchased its own Voicebox digital 
collection system and needed the OK from Security bivision to use it on FBI cases. This is still in the works on our 
end, but we have a similar situation regarding a portable system and require the input of Security Division before 
we move forward. 

Quantico ERF has supplied our division with a portable Voicebox system, but it is currently in use in our Toledo RA. 
The case agent in our Youngstown RA would like to conduct an upcoming FBI T-m on a digital system (rather than 
cassette tapes), but we do not have another system available (niether does ERF). The local HIDTA has purchased a 
portable Voicebox system and has agreed to let the Youngstown RA use it for this T-III. The system will be 

208 


I 



operated in the RA space and would be connected to our DCS-3000 network to obtain telephone target data. 
According to ERF, there is an acceptable configuration which enables secure transfer of the data. The issue arises 
in regards to conducting an FBI case on a system that is not owned by the FBI. As far as the data and audio that 
will be stored on the system is concerned, if necessary, we could remove the hard drives from the system before it 
is returned to HIDTA (replacements would have to be supplied by the FBI and software reloaded by the 
manufacturer). 

From the security standpoint, can we use this system to conduct this upcoming T-IID Are there any other issues 
that must be resolved? 

If you have any questions, please feel free to call me. 


Clev eland Divisio n 
216-1 [office) 

216-1 [cell) 


I „ (CG) (FBI) 

;ttonj aL JctflBEmM5,1 1 :41 AM 
I I fQTD'i (FBI) 

RESTORATION OF RECORDS 


□ thank you for restoring those DCS3000 records for me. You are the best (as □ Iways said) | j 


From: I i (CE) (FBI) 

Sent: fo* _ Wednesday. December 21 2005 2:20 PM 

To: b7C 1 . | (OTP) (FBI) 

Subject: 1 P ALEA Compliance 

b 2 

uHOLAasip giy b,E 

NON-RECORD 


□ 

Missed you at the TA/TS Conference. Wanted to catch up on the status ol [compliance with CALEA, i.e., when are they 
going to get on the DCS-3000 network? No rush to answer - whenever yotrgel a chance. 


Hope you and your group have a very merry Christmas and Joyful New Year. Take care. 



NON-RECORD 


Thanks,| well done. 

1 I bto 

fc7C 

Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 



b2 210 

fc7E 


SE5BET 




ET 


o 


Aggjgga 

NON-RECORD 


b2 

b7E 


Gentlemen, 


I thought you might be interested to know that we have successfutly intercepted a l ] 

real-tims w ith our DCS 3000 system. The results are better than expected and we're ahead of schedule. 
| {has not yet fully deployed the solution throughout their network, but it should not be too much lo 


in 


b7C 


UMGLAQ 9 I PtCP- 

I I (OTP) (FBI) 

From: CLIFFORD, MICHAEL (ER) (FBI) 

sent: , MondfilUflaflBhJaLgQQI SflLEM 

To: I l (ER)(FBlf 

Cc: i ithKxFBn , 

Subject: TW] j 


be 

b7C 


JER) (FBI) 




NON-RECORD 


Thanks ] | 

I l FY1 


b6 

b7C 


b2 

b7E 


Michael P. Clifford, Jr. 

Section Chief 

Section 


From:| | (ER) (FBI) b6 

Sent; Monday. March 29. 2004 1:17 PM b7c 

TorH l(ER) (FBI); CLIFFORD, MICHAEL (ER) (FBI) 

Subject; | 1 


Electronic Surveillance Technology 
nology Division 


U MCLAOOIFtt C 

NON-RECORD 


b2 

b7E 
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- SF ^feEJ 


Gentlemen, 


fo .2 

b7E 


Here's an update on the stat us of ourl w ork: We have successfully decoded the intercept sample 

(both pen-register and audio fl"""" I provided usearlier this month; we did so using our in-house resources. 

So. we are on trac k with the development or an interim collection capability using the DCS-3000. The next meeting with 
r—~ l s scheduled for April 6 in Bedminster, NJ. 




CLIFFORD, MICHAEL (ER) (FBI) 
J-hg.ad,aY,MgrchJJ^2p04 5:06 PM 



L I et All: for consideration as we move forwa rd. DoJl | has made it clear that all 

costs to effect these solutions will be borne bv l b r we will not support their petition for 

extention. In fact, we reserve that we may enfo rce against them if necessary, Purina the CALEA 

Policy Group meeting I t asked for a letter to l I which | . 

outlined what we ex pect r elative to this matter, including: (1) that all costs will be fully absorbed by| ] 

and not passed onto l l and (2) that! h eeds t o obtain appropriate license from Qualcomm" (ie., 
solution "a" at no cost to the goverment or ! I Pis firm up and propose the position we should take 
on any ancillary issues and begin preparing the letter. 

Also, as I S uggested re | | pls prepare non-support letter fori lextention petition and 

prepare for enforcement action against them. The suggestion during the meeting was to use the NJ b: 

county prosecutor case. ’ b< 

h" 

S b' 

s gone, we need to keepiha momentum going on these issues and therefor should 

olicy Group meeting with |_ ps soon as we have a couple of these issues 

keyed up. If next week is too soon, let's aim for the week after. We'll probably need some room in at 
least the first meeting with her to bring her up to speed on CALEA 


FT 




o 


Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 
Investigative Technology Division 
(703 1 I 

— Ori ginal Message — 

From; f feR) (FBI) 

Sent: lutedaV. March IH. 2UU4 11:55 AM 

Subject: ! [ Solution 


I, along with representatives from ATI I and CIU, met with l I interim solution team yesterday in 

Bedminster, NJ. The solutio n that! e working on seems technically viable. There are a couple of techno-legal issues 
that need to be addressed bi land the FBI: 


I. Un til yesterday ! p ad not considered the impact their solution will have on state and local la w enforce ment. | ) 

I [ service is more like a intemet/data service than a traditional telephony/dispatch service. The| |data service 

does not need information about th a ec rossTs IP network. 

HanrtRPt mnhilily is managed by the interconnect switches (i.e. I I . So, there will be no 

I In formation directly available from the interim intercept access points on the ! I network. This is not a 

problem for fede ral law enforcement agencies. But, for state and local agencies it could be a show-stopper. Specifically, 

I l ietwork is currently composed of 4 control switches distributed nationwide. The proposed interim solution 

will reguir d K o "load" all targets in all of the control switches to ensure interception of all incoming calls to targeted lb2 


phones. Hypothetically, the New Jersey State Police will continue to intercept a New Jersey b 


d subscriber who travels * 


to California without any knowledge that they are conducting an unauthorized intercept. We are looking at a way to use 
information availabe from the interconnect switches to allow law enforcement (the ^hntinj 1 limit ' interrupt 

product to only authorized cell-site locations. We should know tpriav after tesfinn wittf | | always 

available to law enforcement from the interconnect switches via J I 1 1 

2. Originally, I thought we cou ld use the| intercept development model for the voice decoder software 

in the interi m solution fol 1 however, in inis case, irs not g oing to be so easy. Wh en the FBI negoiated the CALEA 

solution for ! I ve demanded ! Iwork with all equiment manufacturers 

to develop voice decoders for th ^ | proprieatry VSeLp encoded audio. I h a me up with a slick solution to b2 

this problem: they developed a no-cost plug-and-play software widget for Windows 2000 that equipment manufacturers ib7E 


can plug-in their collection systems to decode the intercepted voice narkets We are currently using this software on the 
DCS-3000 and DCS- 60Q0 systems and other manufacturers ia nl [are also using the software. From our initial 

discussion wit H I t appeared we r. nulri d o the same in t ha Interim solution. Yesterda y's meetin g with ! | 

can celled that no tion. The codec that ! [ uses belongs to l l and, ! h as no plans to 

brin d I into the interim solutionaiscussion. Addibonany j Ip ians to qenver encoded voice packets to law 

enforcement in it's permanent CALEA solution as well. After mucnTIiought on the plane ride home last night, 1 have three 
ideas of how to solve this problem: 

a. Approach! lus in d I liaison connections, to ask for a software decoder widget This will likely 

cost big buck a I has a reputation of being more expensive tha i I If the government can buy an 

unlimited right-to-use license for the decoder widget, we can use it in our interim solution and also give the software to all 
bonafide equipment manufacturers for use in the permanent solution. Cost: High Risk: Low • All of law enforcement can 
be covered. 


b. HaveCEAU, r 

the codec is attainable through open s 


v DSP code for the I i The l I specification for 

has signicant experience with both CDMA and vocoder 


be 


L7C 


technol ogies. I' m confident that he ane w j an develop a DSP-based derniipr fnr the t 
using foi l jC ost: Low Risk: Moderate - only DOJ agencies can use the | | 


12 rate EVRC codec tha j I s 


c. Have BAH software developers and CEAL1 develop a software decoder widget for Windows 2000. This would replace 
the need f or option a. IfCEA U will commit ! l as a resource, TICTU can develop a software widget similar to the 
I I solution fo l fcnd dist ribute it to all equipment manufacturers at no cost. Cost: Lo w Risk:???- there may 

be licensing issues wit l lif the government develops a decoder for a product for whictl bwnsthe 

intellectual property rights.l ' 


We should have a meeting with TICTU, ATU. CIU, CEAU, ar id RCU to discuss these and any other options so that our 
collection system development is not the limiting factor in the l I nterim solution. fo2 

’ fos 

I'm open for any guidance that you may have. ^ lc 


□ 


b6 

b7C 


b7E 


-t)HU-Ai>t>inED 


From: 

Sent: b6 

To: b7c 


Subject: 


1 (OTP) (FBI) 


CLIFFORD, MICHAEL (OTD) (FBI) 
Wednesday. September 20 . 2006 1:47 PM 


1 (QTDii 

□P3TT5T (FBI);^ 


RE: TecFfVictory 


~ JOTD) (FBI) 
Victory 


J (OTD) (FBI); T 


~ If OTDi fFBlf 
](OTD) (FBI);|_ 

|(DO)(FBI);Q 



^FMSIThfFB^ 

NON-RECORD 


Thanks, all.. Well done!! 


□ 


this was the case you called me about. 


Michael P. Clifford, Jr. 
Section Chief 


Electronic Surveillance Technology Section 
Operational Technology Division 

‘ — ' "lOffice) 

Cell) 

Pager) 


b6 

b7C 



06 


SE^ET 
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